NOTE: This bug report is for JIRA Cloud. Using JIRA Server? See the corresponding bug report.
We have identified and fixed 9 cross-site scripting (XSS) vulnerabilities that affect JIRA instances, including publicly available instances (that is, Internet-facing servers). XSS vulnerabilities allow an attacker to embed their own JavaScript into a JIRA page.
These vulnerabilities affect JIRA 4.2 and above, and have been fixed in JIRA 5.1.1.
More information is available in the advisory at https://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2012-08-28
- is related to
-
JRASERVER-29402 Cross-Site Scripting Vulnerabilities
-
- Closed
-