According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is potentially affected by a cross-site scripting (XSS) vulnerability in the ConfigurePortalPages.jspa resource due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this, by convincing a user to click a specially crafted URL, to execute arbitrary script code in a user's browser session. (CVE-2019-3402)

Atlassian Jira 7.13.x < 7.13.3, 8.x < 8.1.1 Cross-Site Scripting Vulnerability

medium Nessus Plugin ID 130265

No changelogs found