Loading...

XML

Word

Printable

Details

Type: Public Security Vulnerability
Resolution: Fixed
Priority: Low
Fix Version/s: 4.15.1, 4.13.5, 4.5.13, 4.16.0
Affects Version/s: 4.5.0, 4.15.0, 4.13.0
Component/s: None
Labels:

CVSS Score:
5.4
CVSS Severity:
Medium

Description

Jira Service Management Server and Data Center allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability caused by parameter pollution.

Affected versions:

version < 4.5.13
4.13.0 ≤ version < 4.13.5
4.15.0 ≤ version < 4.15.1

Fixed versions:

4.5.13
4.13.5
4.15.1
4.16.0

Attachments

Issue Links

mentioned in: Page Loading...

Activity

People

Assignee:: Unassigned

Reporter:: Security Metrics Bot

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 12/Apr/2021 10:09 PM

Updated:: 12/Oct/2021 1:52 AM

Resolved:: 16/Apr/2021 8:29 PM

XSS via parameter pollution