The issue collector in Atlassian Jira before version 7.6.6, from version 7.7.0 before version 7.7.4, from version 7.8.0 before version 7.8.4 and from version 7.9.0 before version 7.9.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the error message of custom fields when an invalid value is specified.

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is potentially affected by multiple vulnerabilities:

 - Atlassian Jira contains a flaw that allows a reflected cross-site scripting (XSS) attack. This flaw exists because the issue collector does not properly sanitize input to error messages for custom fields before returning it to users. This may allow a context-dependent attacker to create a specially crafted request that executes arbitrary script code in a user's browser session within the trust relationship between their browser and the server. (CVE-2018-5230)

 - Atlassian Jira contains a flaw in the ForgotLoginDetails resource that is triggered during the handling of a specially crafted request. This may allow a remote attacker to cause a denial of service. (CVE-2018-5231)

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the instance of Atlassian JIRA hosted on the remote web server is potentially affected by multiple vulnerabilities:

  - Atlassian JIRA contains a flaw that allows a reflected     cross-site scripting (XSS) attack. This flaw exists because     the issue collector does not properly sanitize input to     error messages for custom fields before returning it to users.     This may allow a context-dependent attacker to create a     specially crafted request that executes arbitrary script code     in a user's browser session within the trust relationship     between their browser and the server. (CVE-2018-5230)   
  - Atlassian JIRA contains a flaw in the ForgotLoginDetails     resource that is triggered during the handling of a specially     crafted request. This may allow a remote attacker to cause     a denial of service. (CVE-2018-5231)

ID	Name	Product	Family	Severity
112626	Atlassian Jira < 7.6.6 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
112625	Atlassian Jira 7.7.x < 7.7.4 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
112624	Atlassian Jira 7.8.x < 7.8.4 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
112623	Atlassian Jira 7.9.x < 7.9.2 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
110125	Atlassian JIRA 7.6.5 / 7.7.x < 7.7.4 / 7.8.x < 7.8.4 / 7.9.x < 7.9.2 Multiple Vulnerabilities (SB18-141)	Nessus	CGI abuses	medium

Detections

Analytics

CVE-2018-5230

medium

Tenable Plugins

high

high

high

high

medium