CVE-2013-5319

2022-10-0316:14:55

CWE-79

[email protected]

web.nvd.nist.gov

cve-2013-5319

atlassian jira

xss vulnerability

admin panel

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.7%

JSON

Cross-site scripting (XSS) vulnerability in secure/admin/user/views/deleteuserconfirm.jsp in the Admin Panel in Atlassian JIRA before 6.0.5 allows remote attackers to inject arbitrary web script or HTML via the name parameter to secure/admin/user/DeleteUser!default.jspa.

Affected configurations

NVD

Node

atlassianjiraRange≤6.0.4

atlassianjiraMatch6.0

atlassianjiraMatch6.0.1

atlassianjiraMatch6.0.2

atlassianjiraMatch6.0.3

CPENameOperatorVersion
atlassian:jiraatlassian jirale6.0.4
atlassian:jiraatlassian jiraeq6.0
atlassian:jiraatlassian jiraeq6.0.1
atlassian:jiraatlassian jiraeq6.0.2
atlassian:jiraatlassian jiraeq6.0.3

CPE	Name	Operator	Version
atlassian:jira	atlassian jira	le	6.0.4
atlassian:jira	atlassian jira	eq	6.0
atlassian:jira	atlassian jira	eq	6.0.1
atlassian:jira	atlassian jira	eq	6.0.2
atlassian:jira	atlassian jira	eq	6.0.3