PT-2019-15904

Name of the Vulnerable Software and Affected Versions Xray Test Management for Jira versions prior to 3.5.5 Description The issue allows remote authenticated attackers to cause cross-site scripting XSS in the generic field entry point. This is achieved via the Generic Test Definition field of a n...

CVE-2019-19678: Improper Neutralization of Input During Web Page Generation

In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the generic field entry point via the Generic Test Definition field of a new Generic Test issue...