XSS Vulnerabilities in JIRA 6.1

Question

Hi, I went through various references regarding the patches and issue solved for the XSS vulnerabilities. Currently i am using the JIRA version 6.1 and i want to edit the announcement banner. While doing so, i tried to inject an script with the text: eg: Welcome . When i did the changes, it made me to redirect to that particular mentioned site. So how should i prevent the open redirection or XSS vulnerabilities? Is there any way!! Please share/discuss.

Sachin Gupta_vqmant · Answer

manojkumar3036 · Answer

@Daniel Wester Can you please confirm regarding the same in 7.1 or any higher version than this!!

manojkumar3036 · Answer

Thanks @Daniel Wester Is there any documentation related to it which states that the html is not allowed in the newer versions. Because i have checked the script injection or html tag in JIRA 6.1.