CVE-2016-4318

Atlassian JIRA Server before 7.1.9 has XSS in project/ViewDefaultProjectRoleActors.jspa via a role name.

Score

CVSS 3.0 4.8 Medium

Status

Modified - cret@cert.org

Published

2017-04-10

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Jira (Atlassian)

References

• http://www.securityfocus.com/bid/97516
• https://confluence.atlassian.com/jiracore/jira-core-7-1-x-release-notes-802161668.html#JIRACore7.1.xreleasenotes-v7.1.9…
• https://jira.atlassian.com/browse/JRA-61861
• https://jira.atlassian.com/browse/JRASERVER-61861
• https://jira.atlassian.com/secure/ReleaseNote.jspa?projectId=10240&version=62034