5894 matches found
CVE-2016-6285
The CVE-2016-6285 entry concerns Atlassian Jira prior to 7.2.2, with a Cross-site Scripting (XSS) vulnerability in includes/decorators/global-translations.jsp that allows remote attackers to inject arbitrary web script/HTML via the HTTP Host header. The issue affects Jira Software 7.1.x/7.2.x up ...
CVE-2016-6285
Cross-site scripting XSS vulnerability in includes/decorators/global-translations.jsp in Atlassian JIRA before 7.2.2 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host header...
Deleted page with restrictions notified all users
h2. Summary Restricted page was deleted, user were restricted from that page receive email notification about the page was deleted. h3. h3. Steps to replicate Create 2 users with the name User A and User B. User A created a space called Notification and created a page called Testing. User A...
CVE-2016-6285: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in includes/decorators/global-translations.jsp in Atlassian JIRA before 7.2.2 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host header...
Atlassian JIRA 7.2.x < 7.2.4 XSS
Binary data 9919.prm...
Atlassian JIRA 7.2.x < 7.2.6 Multiple Vulnerabilities
Binary data 9920.prm...
Atlassian JIRA 6.4.x < 6.4.11 Multiple Vulnerabilities
Binary data 9918.prm...
Atlassian Crowd 2.x < 2.11.0 Information Disclosure
Binary data 9903.prm...
Atlassian Crowd < 2.5.2 Information Disclosure
Binary data 9901.prm...
CVE-2016-6668
The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before 7.3.7, and 7.4.0 before 7.8.17; Confluence HipChat plugin 6.26.0 before 7.8.17; and HipChat for JIRA plugin 6.26.0 before 7.8.17 allows remote attackers to obtain the secret key for communicating wit...
Design/Logic Flaw
The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before 7.3.7, and 7.4.0 before 7.8.17; Confluence HipChat plugin 6.26.0 before 7.8.17; and HipChat for JIRA plugin 6.26.0 before 7.8.17 allows remote attackers to obtain the secret key for communicating wit...
CVE-2016-6668
The CVE-2016-6668 issue affects Atlassian HipChat integration plugins across Bitbucket Server, Confluence HipChat, and HipChat for JIRA. The vulnerability enables remote attackers to obtain the secret key used to communicate with HipChat instances by reading unspecified pages. Affected versions i...
CVE-2016-6668
The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before 7.3.7, and 7.4.0 before 7.8.17; Confluence HipChat plugin 6.26.0 before 7.8.17; and HipChat for JIRA plugin 6.26.0 before 7.8.17 allows remote attackers to obtain the secret key for communicating wit...
Atlassian Crowd Detection
Binary data 9899.prm...
Atlassian Crowd < 2.5.3 Information Disclosure
Binary data 9902.prm...
Atlassian Crowd Version Detection
Binary data 9900.prm...
CVE-2016-6668: Exposure of Sensitive Information to an Unauthorized Actor
The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before 7.3.7, and 7.4.0 before 7.8.17; Confluence HipChat plugin 6.26.0 before 7.8.17; and HipChat for JIRA plugin 6.26.0 before 7.8.17 allows remote attackers to obtain the secret key for communicating wit...
Atlassian Bitbucket Server Detection
Binary data 9889.prm...
PT-2017-9013
Name of the Vulnerable Software and Affected Versions Atlassian Hipchat Integration Plugin for Bitbucket Server versions 6.26.0 through 6.27.5 Atlassian Hipchat Integration Plugin for Bitbucket Server versions 6.28.0 through 7.3.7 Atlassian Hipchat Integration Plugin for Bitbucket Server versions...
Atlassian Jira Cross-Site Scripting Vulnerability
Atlassian JIRA is a project issue tracking and management software based on J2EE technology. Atlassian JIRA version 7.1.7 suffers from a cross-site scripting vulnerability that can be exploited by an attacker to inject arbitrary JavaScript code into the request header Host to obtain a user's cook...