Atlassian Jira Transition Scheduler plugin跨站脚本漏洞

Atlassian Jira is a defect tracking management system from Atlassian Australia. The Atlassian Jira Transition Scheduler plugin version 6.5.0 contains a cross-site scripting vulnerability, which stems from the fact that it is easy to store XSS to the creation function via the project name. An...

Atlassian Jira Cross-Site Scripting Vulnerability (CNVD-2022-17776)

Atlassian Jira is a defect tracking management system from Atlassian Australia. Atlassian Jira has a cross-site scripting vulnerability that can be exploited to inject arbitrary HTML or JavaScript...

Atlassian Jira Cross-Site Request Forgery Vulnerability (CNVD-2022-16292)

Atlassian Jira is a defect tracking management system from Atlassian Australia. Atlassian Jira is vulnerable to cross-site request forgery, which is caused by improper design or implementation during the development of code for a web-based system or product. No detailed vulnerability details are...

Atlassian Jira Remote Code Execution Vulnerability

Atlassian Jira is a defect tracking management system from Atlassian Australia. Atlassian Jira is vulnerable to a remote code execution vulnerability that originates when a networked system or product does not properly validate incoming data. An attacker could use this vulnerability to execute...

Atlassian Jira Access Control Error Vulnerability (CNVD-2022-05438)

Atlassian Jira is a defect tracking management system from Atlassian Australia. An access control error vulnerability exists in Atlassian Jira Server and Data Center due to an interruption access control vulnerability in /secure/EditSubscription.jspa, which can be exploited by a remote,...

Atlassian JIRA Server Cross-Site Scripting Vulnerability (CNVD-2021-55939)

Atlassian JIRA Server is the server version of a defect tracking management system from Atlassian Australia. The system is mainly used for tracking and managing various types of issues and defects in work. A cross-site scripting vulnerability exists in Atlassian Jira Server, which can be exploite...