Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-56471
HistoryJul 15, 2022 - 12:00 a.m.

Atlassian Jira Transition Scheduler plugin跨站脚本漏洞

2022-07-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
15
atlassian
jira
transition scheduler
cross-site scripting
vulnerability
javascript
client side
defect tracking
management system
atlassian australia
plugin
version 6.5.0
creation function
project name

EPSS

0.001

Percentile

24.8%

Atlassian Jira is a defect tracking management system from Atlassian Australia. The Atlassian Jira Transition Scheduler plugin version 6.5.0 contains a cross-site scripting vulnerability, which stems from the fact that it is easy to store XSS to the creation function via the project name. An attacker could use this vulnerability to execute JavaScript code on the client side.

EPSS

0.001

Percentile

24.8%

Related for CNVD-2022-56471