Lucene search
K

6 matches found

NVD
NVD
added 2019/05/03 8:29 p.m.25 views

CVE-2018-20824

The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the cyclePeriod parameter...

6.1CVSS5.9AI score0.37577EPSS
Exploits0References1
Prion
Prion
added 2019/05/03 8:29 p.m.20 views

Cross site scripting

The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the cyclePeriod parameter...

4.3CVSS5.9AI score0.37577EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2019/05/03 7:26 p.m.28 views

CVE-2018-20824

The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the cyclePeriod parameter...

5.9AI score0.37577EPSS
Exploits0References1
CVE
CVE
added 2019/05/03 7:26 p.m.118 views

CVE-2018-20824

CVE-2018-20824 affects Atlassian Jira’s WallboardServlet prior to version 7.13.1. The vulnerability allows remote attackers to inject arbitrary HTML or JavaScript via the cyclePeriod parameter, resulting in a cross-site scripting (XSS) issue. Exploitation context: requires a user to interact (per...

6.1CVSS5.9AI score0.37577EPSS
Exploits0References1Affected Software1
Atlassian
Atlassian
added 2019/04/29 3:14 a.m.92 views

XSS in WallboardServlet through the cyclePeriod parameter - CVE-2018-20824

The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the cyclePeriod parameter...

6.1CVSS4.2AI score0.37577EPSS
Exploits0Affected Software1
Atlassian
Atlassian
added 2019/04/29 3:14 a.m.45 views

XSS in WallboardServlet through the cyclePeriod parameter - CVE-2018-20824

The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the cyclePeriod parameter...

6.1CVSS4.2AI score0.37577EPSS
Exploits0
Rows per page
Query Builder