CVE-2022-0540-RCE

Atlassian Jira Seraph 認証バイパス RCE（CVE-2022-0540） 英語 • 中国語 エクスプロイト詳細 著者のブログで見られるように、Atlassianは影響を受けるプラグインの長いリストを提供しました（その大部分は偽陽性でした）。著者は実際に影響を受けるいくつかのプラグインを挙げています。 指示された条件に従い、WBS Gantt-Chart for Jiraの公式ドキュメントと組み合わせて 基本的には、ジョブスケジューラモジュール Task の Beanshell Script を利用した RCE です。エクスプロイトの詳細は以下の通りです。 1...

EUVD-2014-7138

Malware in sbrugna...

Exploit for Improper Authentication in Atlassian Jira_Data_Center

Atlassian Jira Seraph Authentication Bypass RCE（CVE-2022-0540）...

Ricksoft WBS Gantt-Chart add-on cross-site scripting vulnerability (CNVD-2014-09218)

Ricksoft WBS Gantt-Chart add-on is a project management application. A cross-site scripting vulnerability in Ricksoft WBS Gantt-Chart add-on 7.8.1 and prior versions for JIRA allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-7268

Cross-site scripting XSS vulnerability in the data-export feature in the Ricksoft WBS Gantt-Chart add-on 7.8.1 and earlier for JIRA allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-7267...

Cross site scripting

Cross-site scripting XSS vulnerability in the data-export feature in the Ricksoft WBS Gantt-Chart add-on 7.8.1 and earlier for JIRA allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-7267...

CVE-2014-7268

Cross-site scripting XSS vulnerability in the data-export feature in the Ricksoft WBS Gantt-Chart add-on 7.8.1 and earlier for JIRA allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-7267...

CVE-2014-7268

CVE-2014-7268 is a cross-site scripting (XSS) vulnerability in the data-export feature of the Ricksoft WBS Gantt-Chart add-on for JIRA, affecting version 7.8.1 and earlier. The reported issue injects arbitrary web script/HTML via unspecified vectors. The provided sources do not specify the underl...

WBS Gantt-Chart for JIRA vulnerable to cross-site scripting

Overview WBS Gantt-Chart for JIRA provided by Ricksoft Inc. is an add-on for JIRA which provides WBS Work Breakdown Structure and Gantt-Chart features. WBS Gantt-Chart for JIRA contains a flaw in exporting data, which may lead to cross-site scripting CWE-79. Note that this vulnerability is...

WBS Gantt-Chart for JIRA vulnerable to cross-site scripting

Overview WBS Gantt-Chart for JIRA provided by Ricksoft Inc. is an add-on for JIRA which provides WBS Work Breakdown Structure and Gantt-Chart features. WBS Gantt-Chart for JIRA contains a flaw in output page generation, which may lead to cross-site scripting CWE-79. Note that this vulnerability i...

JVN#09289074: WBS Gantt-Chart for JIRA vulnerable to cross-site scripting

WBS Gantt-Chart for JIRA provided by Ricksoft Inc. is an add-on for JIRA which provides WBS Work Breakdown Structure and Gantt-Chart features. WBS Gantt-Chart for JIRA contains a flaw in output page generation, which may lead to cross-site scripting CWE-79. Impact An arbitrary script may be...

JVN#76515134: WBS Gantt-Chart for JIRA vulnerable to cross-site scripting

WBS Gantt-Chart for JIRA provided by Ricksoft Inc. is an add-on for JIRA which provides WBS Work Breakdown Structure and Gantt-Chart features. WBS Gantt-Chart for JIRA contains a flaw in exporting data, which may lead to cross-site scripting CWE-79. Impact An arbitrary script may be executed on t...