Jira Rainbow.Zen - Cross-Site Scripting

Jira Rainbow.Zen contains a cross-site scripting vulnerability via Jira/secure/BrowseProject.jspa which allows remote attackers to inject arbitrary web script or HTML via the id parameter. id: CVE-2007-0885 info: name: Jira Rainbow.Zen - Cross-Site Scripting author: geeknik severity: medium...

CVE-2007-0885

creationtimestamp| type| source ---|---|--- 2024-07-10 15:19:52+00:00| published-proof-of-concept| Telegram/urcLDQnCRDN1gckPAqtX7HqCuWDnXpTggZKHzO6od5XBRDmrA 2025-07-08 21:02:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lti75hehxz2z...

CVE-2007-0885

The Jira Rainbow.Zen extension is vulnerable to a Cross-Site Scripting (XSS) vulnerability in the jira/secure/BrowseProject.jspa component. The root cause is the application's failure to properly sanitize user-supplied input, specifically via the id parameter. Remote attackers can exploit this to...