-
Type:
Bug
-
Resolution: Fixed
-
Priority:
Medium
-
Affects Version/s: 7.8.2, 8.0.0
-
Component/s: Dashboard & Gadgets
-
7.08
-
Severity 2 - Major
The labels gadget in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the jql parameter .
- mentioned in
-
Page Loading...