Lucene search
Security-metrics-botATLASSIAN:JRASERVER-67075HistoryApr 05, 2018 - 4:07 a.m.
XSS in the searchrequest-xml resource through various fields - CVE-2017-18098
2018-04-0504:07:56
security-metrics-bot
jira.atlassian.com
544
0.001 Low
EPSS
Percentile
40.8%
The searchrequest-xml resource in Atlassian Jira before version 7.6.1 and before version 7.7.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through various fields.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jira server and data center | lt | 7.6.1 | |
| jira server and data center | le | 7.5.0 | |
| jira server and data center | lt | 7.7.0 |
Related
cve
cve
CVE-2017-18098
2018-04-06 13:29:00
atlassian
atlassian
prion
prion
Cross site scripting
2018-04-06 13:29:00
cvelist
cvelist
CVE-2017-18098
2018-04-06 00:00:00
nvd
nvd
CVE-2017-18098
2018-04-06 13:29:00
nessus
nessus
Atlassian JIRA < 7.6.1 Multiple Vulnerabilities
2019-03-05 00:00:00