Description

The Trello board importer resource in Atlassian Jira before version 7.6.1 allows remote attackers who can convince a Jira administrator to import their Trello board to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the title of a Trello card.

Remediation

References

CVE-2017-18097

Related Vulnerabilities

WordPress Plugin Backup, Restore and Migrate WordPress Sites With the XCloner Arbitrary File Deletion (3.1.4)

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7887)

Oracle JRE CVE-2017-10355 Vulnerability (CVE-2017-10355)

WordPress 5.8.x Multiple Vulnerabilities (5.8 - 5.8.8)

SugarCRM Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-17313)

Severity

Medium

Classification

CVE-2017-18097 CWE-707

Tags

Missing Update Known Vulnerabilities