Description

The AssociateFieldToScreens page in Atlassian Jira Server and Data Center before version 8.18.0 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability via the name of a custom field.

Remediation

References

CVE-2021-39117

Related Vulnerabilities

e107 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-6433)

WordPress Plugin WP-Client Lite::Client Portals, File Sharing, Messaging & Invoicing Local File Inclusion (1.1.1)

WordPress Plugin LearnPress-WordPress LMS Cross-Site Request Forgery (3.2.7.2)

WordPress Plugin RegistrationMagic-Custom Registration Forms, User Registration, Payment, and User Login Multiple Vulnerabilities (4.6.0.1)

Apache Traffic Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2024-35161)

Severity

Medium

Classification

CVE-2021-39117 CWE-707

Tags

Missing Update Known Vulnerabilities