Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:JRASERVER-66624
HistoryJan 12, 2018 - 4:33 a.m.

XSS through the orderby parameter in the issue search resource - CVE-2017-16864

2018-01-1204:33:26
security-metrics-bot
jira.atlassian.com
77

0.001 Low

EPSS

Percentile

40.8%

The issue search resource in Atlassian Jira before version 7.4.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the orderby parameter.

0.001 Low

EPSS

Percentile

40.8%

Related for ATLASSIAN:JRASERVER-66624