Description

The printable searchrequest issue resource in Atlassian Jira before version 7.2.12 and from version 7.3.0 before 7.6.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the jqlQuery query parameter.

Remediation

References

CVE-2017-14594

Related Vulnerabilities

Ampache Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-0771)

Perl Other Vulnerability (CVE-2011-0761)

WordPress Plugin fGallery SQL Injection (2.4.1)

MySQL CVE-2022-21249 Vulnerability (CVE-2022-21249)

WordPress Plugin Time Sheets Cross-Site Scripting (1.4.2)

Severity

Medium

Classification

CVE-2017-14594 CWE-707

Tags

Missing Update Known Vulnerabilities