Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:JRASERVER-66495
HistoryDec 18, 2017 - 2:40 a.m.

XSS through the jqlQuery query parameter to the printable searchrequest issue resource - CVE-2017-14594

2017-12-1802:40:19
security-metrics-bot
jira.atlassian.com
50

EPSS

0.001

Percentile

50.8%

The printable searchrequest issue resource in Atlassian Jira before version 7.2.12 and from version 7.3.0 before 7.6.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the jqlQuery query parameter.

EPSS

0.001

Percentile

50.8%

Related for ATLASSIAN:JRASERVER-66495