← CVE Intelligence

CVE-2018-5232

Atlassian / Jira PUBLISHED

Description (CNA)

The EditIssue.jspa resource in Atlassian Jira before version 7.6.7 and from version 7.7.0 before version 7.10.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the issuetype parameter.

Affected (CNA)

Vendor / productVersions
Atlassian / Jiraaffected unspecified before 7.6.7; affected 7.7.0 before unspecified; affected unspecified before 7.10.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.