...onfluence.atlassian.com/conf74/html-include-macro-1003128854.html Both of these macro pose the risk of XSS vulnerability. We are using version 7.4.1 . Is there a way to use these macros and a...
...ested with version below: Atlassian JIRA Project Management Software (v7.6.4#76006-sha1:ca83f0e) I've attempted to do a XSS (Cross Site Scripting) attack with this, but I wasn't successful in c...
Hi, I went through various references regarding the patches and issue solved for the XSS vulnerabilities. Currently i am using the JIRA version 6.1 and i want to edit the announcement banner.&n...
...ystem Announcement. So there can be XSS attack!!. I want to prevent the script injection in those announcement banner, general configuration or system announcement areas.
As the application allows a valid user to insert java script in the announcement banner which is redirecting to some other site. Eg: Welcome<script>window.location.href='some other site'...
Hi, This is a long shot, but is anyone using JIRA 5.1.x with Juniper IVE for extranet access to JIRA? After upgrading to JIRA 5.1.3 we're seeing an issue with Rapid Boards where a security except...
Copied to clipboard
Online forums and learning are now in one easy-to-use experience.
By continuing, you accept the updated Community Terms of Use and acknowledge the Privacy Policy. Your public name, photo, and achievements may be publicly visible and available in search engines.