atlassian jira 4.0 vulnerabilities and exploits

(subscribe to this query)

Multiple cross-site scripting (XSS) vulnerabilities in Atlassian JIRA 3.12 up to and including 4.1 allow remote malicious users to inject arbitrary web script or HTML via the (1) element or (2) defaultColor parameter to the Colour Picker page; the (3) formName parameter, (4) elem...

Atlassian Jira 3.12 Atlassian Jira 3.12.1 Atlassian Jira 3.12.2 Atlassian Jira 3.12.3 Atlassian Jira 3.13 Atlassian Jira 3.13.1 Atlassian Jira 3.13.2 Atlassian Jira 3.13.3 Atlassian Jira 3.13.4 Atlassian Jira 3.13.5 Atlassian Jira 4.0 Atlassian Jira 4.0.1

1 Github repository

Atlassian JIRA 3.12 up to and including 4.1 allows remote authenticated administrators to execute arbitrary code by modifying the (1) attachment (aka attachments), (2) index (aka indexing), or (3) backup path and then uploading a file, as exploited in the wild in April 2010.

Atlassian Jira 3.12 Atlassian Jira 3.12.1 Atlassian Jira 3.12.2 Atlassian Jira 3.12.3 Atlassian Jira 3.13 Atlassian Jira 3.13.1 Atlassian Jira 3.13.2 Atlassian Jira 3.13.3 Atlassian Jira 3.13.4 Atlassian Jira 3.13.5 Atlassian Jira 4.0 Atlassian Jira 4.0.1

Atlassian JIRA prior to 5.0.1; Confluence prior to 3.5.16, 4.0 prior to 4.0.7, and 4.1 prior to 4.1.10; FishEye and Crucible prior to 2.5.8, 2.6 prior to 2.6.8, and 2.7 prior to 2.7.12; Bamboo prior to 3.3.4 and 3.4.x prior to 3.4.5; and Crowd prior to 2.0.9, 2.1 prior to 2.1.2, ...

Atlassian Bamboo Atlassian Confluence Atlassian Confluence Server Atlassian Crowd Atlassian Crucible Atlassian Fisheye Atlassian Jira

1 EDB exploit

The TM Software Tempo plugin prior to 6.4.3.1, 6.5.x prior to 6.5.0.2, and 7.x prior to 7.0.3 for Atlassian JIRA does not properly restrict the capabilities of third-party XML parsers, which allows remote authenticated users to cause a denial of service (resource consumption) via...

Tm Software Tempo Tm Software Tempo 2.2 Tm Software Tempo 2.3 Tm Software Tempo 2.3.1 Tm Software Tempo 2.4.1 Tm Software Tempo 2.5.1 Tm Software Tempo 2.6.1 Tm Software Tempo 2.7.1 Tm Software Tempo 2.8.1 Tm Software Tempo 4.0 Tm Software Tempo 4.0.1 Tm Software Tempo 4.1

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook