Description

The two-dimensional filter statistics gadget in Atlassian Jira before version 7.6.10, from version 7.7.0 before version 7.12.4, and from version 7.13.0 before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of a saved filter when displayed on a Jira dashboard.

Remediation

References

CVE-2018-13403

Related Vulnerabilities

Oracle Database Server CVE-2019-2571 Vulnerability (CVE-2019-2571)

Perl Improper Certificate Validation Vulnerability (CVE-2023-31484)

Drupal Improper Input Validation Vulnerability (CVE-2013-6389)

Joomla! Core 3.x.x Cross-Site Scripting (3.1.0 - 3.9.23)

MySQL CVE-2016-0646 Vulnerability (CVE-2016-0646)

Severity

Medium

Classification

CVE-2018-13403 CWE-707

Tags

Missing Update Known Vulnerabilities