CVE-2016-6285

概要

参考情報

• packetstormsecurity.com/files/140548/Atlassian-Jira-7.1.7-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2017/Jan/41 · Exploit
• securityfocus.com/bid/95913 · Third Party Advisory
• confluence.atlassian.com/adminjira/jira-platform-releases/jira-7-2-x-platform-release-notes · Release Notes
• jira.atlassian.com/browse/JRA-61888 · Exploit

jira のその他の脆弱性

• CVE-2021-43945中 4.8Affected versions of Atlassian Jira Server and Data Center allow remote attackers with Roadmaps Administrator permissions to inject arbitrar…
• CVE-2021-43953中 4.3Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to toggle the Thread Contention and CPU mo…
• CVE-2021-43947高 7.2Affected versions of Atlassian Jira Server and Data Center allow remote attackers with administrator privileges to execute arbitrary code vi…
• CVE-2021-41312高 7.5Affected versions of Atlassian Jira Server and Data Center allow a remote attacker who has had their access revoked from Jira Service Manage…
• CVE-2021-41308中 6.5Affected versions of Atlassian Jira Server and Data Center allow authenticated yet non-administrator remote attackers to edit the File Repli…