102505

https://jira.atlassian.com/browse/JRASERVER-66624

According to its self-reported version number, the instance of Atlassian JIRA hosted on the remote web server is prior to 7.4.2. It is therefore, potentially affected by a cross-site scripting (XSS) vulnerability in the orderby parameter due to improper validation of user-supplied input data. An unauthenticated, remote attacker can exploit this, by convincing a user to click a specially crafted URL, to execute arbitrary script code in a user's browser session.

CVE-2017-16864

medium

Tenable Plugins

medium