Description

Cross-site scripting (XSS) vulnerability in includes/decorators/global-translations.jsp in Atlassian JIRA before 7.2.2 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host header.

Remediation

References

CVE-2016-6285

Related Vulnerabilities

Atlassian Jira Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2019-20409)

WordPress Plugin P3 (Plugin Performance Profiler) Cross-Site Scripting (1.5.3.8)

Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2018-17858)

Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-3723)

WordPress Plugin yolink Search for WordPress Cross-Site Scripting (2.5)

Severity

Medium

Classification

CVE-2016-6285 CWE-707

Tags

Missing Update Known Vulnerabilities