Description

The EditIssue.jspa resource in Atlassian Jira before version 7.6.7 and from version 7.7.0 before version 7.10.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the issuetype parameter.

Remediation

References

CVE-2018-5232

Related Vulnerabilities

Oracle Application Server Other Vulnerability (CVE-2007-0286)

MySQL CVE-2019-2687 Vulnerability (CVE-2019-2687)

WordPress Plugin WR ContactForm SQL Injection (1.1.9)

WordPress Improper Authentication Vulnerability (CVE-2007-6013)

osTicket Other Vulnerability (CVE-2005-1438)

Severity

Medium

Classification

CVE-2018-5232 CWE-707

Tags

Missing Update Known Vulnerabilities