Description

The printable searchrequest issue resource in Atlassian Jira before version 7.2.12 and from version 7.3.0 before 7.6.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the jqlQuery query parameter.

Remediation

References

CVE-2017-14594

Related Vulnerabilities

WordPress Plugin Asset CleanUp:Page Speed Booster Cross-Site Scripting (1.3.6.7)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Scripting (2.8.3)

MySQL CVE-2018-3279 Vulnerability (CVE-2018-3279)

WordPress Plugin WooCommerce OpenPOS Arbitrary File Deletion (6.4.4)

Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-1385)

Severity

Medium

Classification

CVE-2017-14594 CWE-707

Tags

Missing Update Known Vulnerabilities