Jira Rainbow.Zen - Cross-Site Scripting

Jira Rainbow.Zen contains a cross-site scripting vulnerability via Jira/secure/BrowseProject.jspa which allows remote attackers to inject arbitrary web script or HTML via the id parameter. id: CVE-2007-0885 info: name: Jira Rainbow.Zen - Cross-Site Scripting author: geeknik severity: medium...

CVE-2007-0885

creationtimestamp| type| source ---|---|--- 2024-07-10 15:19:52+00:00| published-proof-of-concept| Telegram/urcLDQnCRDN1gckPAqtX7HqCuWDnXpTggZKHzO6od5XBRDmrA 2025-07-08 21:02:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lti75hehxz2z...

CVE-2007-0885

Jira Rainbow.Zen exposes a Cross‑Site Scripting (XSS) vulnerability in Jira/secure/BrowseProject.jspa. The id parameter can be exploited by remote attackers to inject arbitrary script/HTML into a user’s browser. This is documented in CVE‑2007‑0885 and mirrored in the Nuclei template: remediation ...