CVE-2016-6285

The CVE-2016-6285 entry concerns Atlassian Jira prior to 7.2.2, with a Cross-site Scripting (XSS) vulnerability in includes/decorators/global-translations.jsp that allows remote attackers to inject arbitrary web script/HTML via the HTTP Host header. The issue affects Jira Software 7.1.x/7.2.x up ...