CVE-2018-20824

CVE-2018-20824: vulnerability in Atlassian Jira

Published · Updated

30Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 38%
exploitation probability
38%top 1% of all CVEs
observed exploitation
nono source reports it
The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the cyclePeriod parameter.
Affected products
Atlassian · Jira
Related CVEs — Atlassian Jira

In the same product, most dangerous first.

CVE-2019-8451—CVE-2019-8451EPSS 94.5%CVE-2019-8449—CVE-2019-8449EPSS 84.8%CVE-2019-8442—CVE-2019-8442EPSS 59.8%CVE-2019-3403—CVE-2019-3403EPSS 52.6%CVE-2018-5230—CVE-2018-5230EPSS 37.6%CVE-2019-8446—CVE-2019-8446EPSS 17.5%
References
https://jira.atlassian.com/browse/JRASERVER-69238