← CVE Intelligence

CVE-2017-16864

Atlassian / Jira PUBLISHED

Description (CNA)

The issue search resource in Atlassian Jira before version 7.4.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the orderby parameter.

Affected (CNA)

Vendor / productVersions
Atlassian / Jiraaffected prior to 7.4.2

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.