Jira - Reflected XSS using searchOwnerUserName parameter.

By
Jijith Rajan
Published on
10 Jan 2022
Vulnerability

Description

Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 is vulnerable to Reflected cross-site scripting (XSS) in ConfigurePortalPages.jspa it allows remote attackers to inject arbitrary HTML or JavaScript searchOwnerUserName parameter.

Recommendation

  • Update to the latest version
Written by
Jijith Rajan
Jijith Rajan
Cyber Security Engineer
Experience the Beagle Security platform
Unlock one full penetration test and all Advanced plan features free for 14 days