CVE-2022-32567

The Appfire Jira Misc Custom Fields (JMCF) app 2.4.6 for Atlassian Jira allows XSS via a crafted project name to the Add Auto Indexing Rule function.

Score

CVSS 3.1 5.4 Medium

Status

Modified - cve@mitre.org

Published

2022-07-07

Last modified

2024-08-03

Weaknesses

CWE-79

Affected products

• Jira Misc Custom Fields (Appfire)

References

• https://marketplace.atlassian.com/apps/27136/jira-misc-custom-fields-jmcf?hosting=server&tab=overview
• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-039.txt