CVE-2007-0885

The Jira Rainbow.Zen extension is vulnerable to a Cross-Site Scripting (XSS) vulnerability in the jira/secure/BrowseProject.jspa component. The root cause is the application's failure to properly sanitize user-supplied input, specifically via the id parameter. Remote attackers can exploit this to...