CVE-2017-14594

2018-01-12T14:29:00
ID CVE-2017-14594
Type cve
Reporter cve@mitre.org
Modified 2018-02-01T20:17:00

Description

The printable searchrequest issue resource in Atlassian Jira before version 7.2.12 and from version 7.3.0 before 7.6.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the jqlQuery query parameter.