Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-5232)

Description

The EditIssue.jspa resource in Atlassian Jira before version 7.6.7 and from version 7.7.0 before version 7.10.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the issuetype parameter.

Remediation

References

CVE-2018-5232

Related Vulnerabilities

WordPress Plugin Yes-co ORES Cross-Site Scripting (1.3.44)

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5621)

Mailman Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3089)

WordPress Plugin Acunetix Secure WordPress Cross-Site Request Forgery (3.0.2)

Oracle JRE CVE-2020-2803 Vulnerability (CVE-2020-2803)

Severity

Medium

Classification

CVE-2018-5232 CWE-707