Lucene search
Security-metrics-botATLASSIAN:JRASERVER-69243HistoryApr 29, 2019 - 3:59 a.m.
XSS in the ConfigurePortalPages.jspa resource - CVE-2019-3402
2019-04-2903:59:50
security-metrics-bot
jira.atlassian.com
98
0.002 Low
EPSS
Percentile
62.1%
The ConfigurePortalPages.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the searchOwnerUserName parameter.
Related
symantec
symantec
Atlassian JIRA CVE-2019-3402 Cross Site Scripting Vulnerability
2019-04-29 00:00:00
nvd
nvd
CVE-2019-3402
2019-05-22 18:29:00
prion
prion
Cross site scripting
2019-05-22 18:29:00
nuclei
nuclei
Jira < 8.1.1 - Cross-Site Scripting
2020-11-06 10:28:11
cvelist
cvelist
CVE-2019-3402
2019-05-08 00:00:00
cve
cve
CVE-2019-3402
2019-05-22 18:29:00
atlassian
atlassian
XSS in the ConfigurePortalPages.jspa resource - CVE-2019-3402
2019-04-29 03:59:50
nessus
nessus
Atlassian Jira 8.0.0 < 8.1.1 Multiple Vulnerabilities
2023-03-14 00:00:00
Atlassian Jira 7.13.x < 7.13.4 Multiple Vulnerabilities
2023-03-14 00:00:00