Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:JRASERVER-66719
HistoryFeb 02, 2018 - 12:10 a.m.

XSS in the IncomingMailServers resource through the messagesThreshold parameter - CVE-2017-18039

2018-02-0200:10:51
security-metrics-bot
jira.atlassian.com
58

EPSS

0.001

Percentile

40.6%

The IncomingMailServers resource in Atlassian JIRA from version 6.2.1 before version 7.4.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the messagesThreshold parameter .

EPSS

0.001

Percentile

40.6%

Related for ATLASSIAN:JRASERVER-66719