Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-18100)

Description

The agile wallboard gadget in Atlassian Jira before version 7.8.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of quick filters.

Remediation

References

CVE-2017-18100

Related Vulnerabilities

Cherokee Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2011-2191)

MediaWiki Improper Authentication Vulnerability (CVE-2018-0505)

WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-5270)

Oracle Application Server Other Vulnerability (CVE-2005-3446)

fancybox Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-1494)

Severity

Medium

Classification

CVE-2017-18100 CWE-707