CVE-2018-5232

MEDIUM 6.1CVE-2018-5232 · Published 18/07/2018 · updated 17/06/2026

In short

CVE-2018-5232 is a MEDIUM (CVSS 6.1) vulnerability affecting jira (atlassian), jira server (atlassian).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.1% of all vulnerabilities.
Fix: update to 7.6.7, 7.10.1 or later.

Package	Affected versions	Patched versions
jira atlassian	`< 7.6.7`	`7.6.7`
jira server atlassian	`≥ 7.7.0, < 7.10.1`	`7.10.1`

Description

The EditIssue.jspa resource in Atlassian Jira before version 7.6.7 and from version 7.7.0 before version 7.10.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the issuetype parameter.

References

jira.atlassian.com/browse/JRASERVER-67410 · Issue Tracking

More vulnerabilities in jira

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

jira

atlassian

< 7.6.7

7.6.7

jira server

atlassian

≥ 7.7.0, < 7.10.1

7.10.1

More vulnerabilities in jira

See all →