8 matches found
Cross site scripting
The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the cyclePeriod parameter...
CVE-2018-20824
The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the cyclePeriod parameter...
CVE-2018-20824
CVE-2018-20824 affects Atlassian Jira’s WallboardServlet prior to version 7.13.1. The vulnerability allows remote attackers to inject arbitrary HTML or JavaScript via the cyclePeriod parameter, resulting in a cross-site scripting (XSS) issue. Exploitation context: requires a user to interact (per...
CVE-2018-20824
The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the cyclePeriod parameter...
PT-2019-10263
Name of the Vulnerable Software and Affected Versions: Jira versions prior to 7.13.1 Description: The issue allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the cyclePeriod parameter of the WallboardServlet resource. Recommendations: F...
CVE-2018-20824: Improper Neutralization of Input During Web Page Generation
The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the cyclePeriod parameter...
XSS in WallboardServlet through the cyclePeriod parameter - CVE-2018-20824
The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the cyclePeriod parameter...
XSS in WallboardServlet through the cyclePeriod parameter - CVE-2018-20824
The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the cyclePeriod parameter...