EUVD-2018-17015

Malware in sbrugna...

Atlassian Jira < 7.6.7 Xss In Editissue.jspa

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 7.6.7. It is, therefore, affected by a vulnerability which permits remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the...

XSS in EditIssue.jspa through the issuetype parameter - CVE-2018-5232

The EditIssue.jspa resource in Atlassian Jira Server before version 7.6.7 and from version 7.7.0 before version 7.10.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the issuetype parameter...