[JSWSERVER-5642] Cross Site Scripting Vulnerabilities

Type: Bug
Resolution: Fixed
Priority: Medium (View bug fix roadmap)
Fix Version/s: 5.9.8
Affects Version/s: None
Component/s: None
Labels:

Bug Fix Policy:
View Atlassian Server bug fix policy

We have identified and fixed several reflected and persisted cross-site scripting (XSS) vulnerabilities that affect GreenHopper instances, including publicly available instances (that is, Internet-facing servers). XSS vulnerabilities allow an attacker to embed their own JavaScript into a GreenHopper page.

More details are available in the advisory at https://confluence.atlassian.com/display/GH/GreenHopper+Security+Advisory+2012-08-21

causes: SCT-129 Failed to load

mentioned in: GreenHopper Security Advisory 2012-08-21; GreenHopper Security Advisory 2012-08-21; Page No Confluence page found with the given URL.; GreenHopper Security Advisory 2012-08-21; Page Loading...; Page Loading...; Wiki Page Loading...; Wiki Page Loading...

(4 mentioned in)

No work has yet been logged on this issue.

Assignee:: VitalyA

Reporter:: VitalyA

Affected customers:: 0 This affects my team

Watchers:: 13 Start watching this issue

Created:: 15/Aug/2012 1:45 AM

Updated:: 16/Oct/2018 1:06 AM

Resolved:: 20/Aug/2012 11:31 PM

Jira Software Data Center

Details

Description

Attachments

Issue Links

Forms

Activity

People

Dates

Backbone Issue Sync