Description

The IncomingMailServers resource in Atlassian Jira from version 6.2.1 before version 7.4.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the messagesThreshold parameter.

Remediation

References

CVE-2017-18039

Related Vulnerabilities

Drupal Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-3170)

Oracle JRE CVE-2013-0432 Vulnerability (CVE-2013-0432)

Magento Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-24407)

Ruby on Rails Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-6497)

XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2022-36100)

Severity

Medium

Classification

CVE-2017-18039 CWE-707

Tags

Missing Update Known Vulnerabilities