Description

The IncomingMailServers resource in Atlassian Jira from version 6.2.1 before version 7.4.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the messagesThreshold parameter.

Remediation

References

CVE-2017-18039

Related Vulnerabilities

Magento Improper Access Control Vulnerability (CVE-2021-21020)

SharePoint CVE-2023-36891 Vulnerability (CVE-2023-36891)

WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.16)

WordPress Plugin Power Charts-Responsive Beautiful Charts & Graphs Cross-Site Scripting (0.1.0)

Liferay DXP Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-26272)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2017-18039