Atlassian JIRA 7.x.x < 7.13.1 / 8.0.0 Cross-Site Scripting (XSS) Vulnerability (SB18-141)

According to its self-reported version number, the instance of Atlassian JIRA hosted on the remote web server is potentially affected by a cross-site scripting vulnerability which allows a reflected cross-site scripting XSS attack. This flaw exists because the activity stream gadget does not...

Atlassian Jira Cross-Site Scripting Vulnerability (CNVD-2019-27253)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. A cross-site scripting vulnerability exists in the activity stream gadget in Atlassian Jira versions prior to 7.13.1. The...

CVE-2018-20827: Improper Neutralization of Input During Web Page Generation

The activity stream gadget in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the country parameter...

PT-2019-10265

Name of the Vulnerable Software and Affected Versions: Jira versions prior to 7.13.1 Description: The issue is related to a cross site scripting XSS vulnerability in the country parameter of the activity stream gadget. This allows remote attackers to inject arbitrary HTML or JavaScript...

Can't set visibility on comment created via Activity Stream Gadget

I can't restrict the visibility of an comment created via the activity stream gadget. In our environment it is important for us to have this feature available everywhere where users are able to create comments on issues...