Description

The IncomingMailServers resource in Atlassian Jira from version 6.2.1 before version 7.4.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the messagesThreshold parameter.

Remediation

References

CVE-2017-18039

Related Vulnerabilities

Oracle JRE Other Vulnerability (CVE-2012-5085)

Moodle Improper Privilege Management Vulnerability (CVE-2023-5549)

Python Incorrect Conversion between Numeric Types Vulnerability (CVE-2008-1721)

Apache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2009-2902)

WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-6514)

Severity

Medium

Classification

CVE-2017-18039 CWE-707

Tags

Missing Update Known Vulnerabilities