CVE-2017-18097

CVE-2017-18097 affects Atlassian Jira prior to 7.6.1 via the Trello board importer resource. The vulnerability is an XSS in the Trello card title that can be triggered when an attacker convinces a Jira administrator to import their Trello board, allowing injection of arbitrary HTML/JavaScript. At...