Atlassian jira xss Vulnerability (CVE-2017-16863)

Atlassian jira xss Vulnerability (CVE-2017-16863)
Atlassian jira xss Vulnerability (CVE-2017-16863)

Release date:
Updated on:

Affected Systems:

Atlassian JIRA <7.5.3

Description:

Bugtraq id: 102732
CVE (CAN) ID: CVE-2017-16863

JIRA is a project and transaction tracking tool developed by Atlassian.

In Atlassian Jira <7.5.3, The PieChart accessory has a security vulnerability, which allows remote attackers to inject arbitrary HTML or JavaScript through cross-site scripting.

<* Source: vendor
*>

Suggestion:

Vendor patch:

Atlassian
---------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.atlassian.com/software/jira/
Https://jira.atlassian.com/browse/JRASERVER-66623