Lucene search
+L

1 matches found

Atlassian
Atlassian
added 2013/07/01 4:53 a.m.23 views

Reflected XSS in JIRA Admin Panel (Delete User)

The 'name' param in jira-components/jira-webapp/src/main/webapp/secure/admin/user/views/deleteuserconfirm.jsp is not sanitised, enabling arbitrary html/script execution. A url to demonstrate this issue is:...

1.2AI score
SaveExploits0Affected Software1
Rows per page
Query Builder