Design/Logic Flaw

The Appfire Jira Misc Custom Fields JMCF app 2.4.6 for Atlassian Jira allows XSS via a crafted project name to the Add Auto Indexing Rule function...

PT-2022-21378

Name of the Vulnerable Software and Affected Versions Appfire Jira Misc Custom Fields JMCF app version 2.4.6 Description The issue allows for XSS via a crafted project name to the Add Auto Indexing Rule function. This can be exploited by sending a malicious project name, potentially leading to th...

CVE-2022-32567: Improper Neutralization of Input During Web Page Generation

The Appfire Jira Misc Custom Fields JMCF app 2.4.6 for Atlassian Jira allows XSS via a crafted project name to the Add Auto Indexing Rule function...