Lucene search
AtlassianCVELIST:CVE-2018-13395HistoryAug 27, 2018 - 12:00 a.m.
CVE-2018-13395
2018-08-2700:00:00
atlassian
www.cve.org
0.001 Low
EPSS
Percentile
45.1%
Various resources in Atlassian Jira before version 7.6.8, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, from version 7.10.0 before version 7.10.3 and before version 7.11.1 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the epic colour field of an issue while an issue is being moved.
CNA Affected
[
{
"product": "Jira",
"vendor": "Atlassian",
"versions": [
{
"lessThan": "7.6.8",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "unspecified",
"status": "affected",
"version": "7.7.0",
"versionType": "custom"
},
{
"lessThan": "7.7.5",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "unspecified",
"status": "affected",
"version": "7.8.0",
"versionType": "custom"
},
{
"lessThan": "7.8.5",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "unspecified",
"status": "affected",
"version": "7.9.0",
"versionType": "custom"
},
{
"lessThan": "7.9.3",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "unspecified",
"status": "affected",
"version": "7.10.0",
"versionType": "custom"
},
{
"lessThan": "7.10.3",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "unspecified",
"status": "affected",
"version": "7.11.0",
"versionType": "custom"
},
{
"lessThan": "7.11.1",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
atlassian
atlassian
prion
prion
Cross site scripting
2018-08-28 12:29:00
nvd
nvd
CVE-2018-13395
2018-08-28 12:29:00
cve
cve
CVE-2018-13395
2018-08-28 12:29:00
nessus
nessus