CVE-2018-13395

CVE-2018-13395: vulnerability in Atlassian Jira

Published · Updated

Follow this CVE+ Monitor Jira

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.0%
Various resources in Atlassian Jira before version 7.6.8, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, from version 7.10.0 before version 7.10.3 and before version 7.11.1 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the epic colour field of an issue while an issue is being moved.
Affected products
Atlassian · Jira
Related CVEs — Atlassian Jira

In the same product, most dangerous first.

CVE-2019-8451—CVE-2019-8451EPSS 94.5%CVE-2019-8449—CVE-2019-8449EPSS 85.7%CVE-2019-8442—CVE-2019-8442EPSS 59.8%CVE-2019-3403—CVE-2019-3403EPSS 53.6%CVE-2018-20824—CVE-2018-20824EPSS 38.0%CVE-2018-5230—CVE-2018-5230EPSS 37.0%