Description
IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Remediation
References
Related Vulnerabilities
PHP Improper Input Validation Vulnerability (CVE-2013-4248)
Magento XML Injection (aka Blind XPath Injection) Vulnerability (CVE-2021-21019)
Oracle JRE CVE-2013-5818 Vulnerability (CVE-2013-5818)
Mailman Other Vulnerability (CVE-2006-2191)
Elgg Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2021-3964)