Description
The WebWork 1 web application framework in Atlassian JIRA before 3.13.2 allows remote attackers to invoke exposed public JIRA methods via a crafted URL that is dynamically transformed into method calls, aka "WebWork 1 Parameter Injection Hole."
Remediation
References
Related Vulnerabilities
Jenkins Improper Input Validation Vulnerability (CVE-2012-6073)
WordPress Plugin Contact Form Widget-Contact Query, Form Maker SQL Injection (1.0.9)
Oracle Application Server CVE-2002-1637 Vulnerability (CVE-2002-1637)
Oracle JRE CVE-2013-5830 Vulnerability (CVE-2013-5830)
WordPress Plugin Post Views Count (Support caching plugins!) Cross-Site Scripting (3.0.2)