Group picker popup JSP has XSS hole if group names are XSS shaped

2010-04-19T02:59:14
ID ATLASSIAN:JRASERVER-21037
Type atlassian
Reporter bbaker
Modified 2017-02-17T06:16:59

Description

If a group name has a XSS shaped name, then the group picker will allow scripts to be executed.