Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:JRASERVER-69238
HistoryApr 29, 2019 - 3:14 a.m.

XSS in WallboardServlet through the cyclePeriod parameter - CVE-2018-20824

2019-04-2903:14:07
security-metrics-bot
jira.atlassian.com
71

EPSS

0.002

Percentile

58.5%

The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the cyclePeriod parameter.

EPSS

0.002

Percentile

58.5%