Description

The MigratePriorityScheme resource in Jira before version 8.3.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the priority icon url of an issue priority.

Remediation

References

CVE-2019-11584

Related Vulnerabilities

WordPress Plugin Unlimited Elements For Elementor (Free Widgets, Addons, Templates) SQL Injection (1.5.107)

MySQL CVE-2012-1690 Vulnerability (CVE-2012-1690)

WordPress Plugin BuddyPress Cross-Site Scripting (2.2.2.1)

WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.24)

Ruby Numeric Errors Vulnerability (CVE-2008-2376)

Severity

Medium

Classification

CVE-2019-11584 CWE-707

Tags

Missing Update Known Vulnerabilities