Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:JRASERVER-67108
HistoryApr 10, 2018 - 3:55 a.m.

XSS in various types of nested wiki markup - CVE-2017-18102

2018-04-1003:55:19
security-metrics-bot
jira.atlassian.com
560

EPSS

0.001

Percentile

28.6%

The bundled version of atlassian-renderer in Atlassian JIRA before version 7.7.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in nested wiki markup. For more information see https://jira.atlassian.com/browse/RNDR-153 (currently restricted to Atlassian staff).

EPSS

0.001

Percentile

28.6%

Related for ATLASSIAN:JRASERVER-67108