Description

The labels gadget in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the jql parameter.

Remediation

References

CVE-2019-3400

Related Vulnerabilities

WordPress Plugin FeedList 'handler_image.php' Cross-Site Scripting (2.61.01)

WordPress Plugin Premium Addons for Elementor Cross-Site Scripting (3.7.2)

WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2019-17531)

Jenkins Integer Overflow or Wraparound Vulnerability (CVE-2023-36478)

WordPress Plugin Live Forms-Visual Form Builder SQL Injection (3.0.1)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2019-3400