CVE-2022-32567: appfire jira misc custom fields – CVSS 5.4 · Watchpost

← All vulnerabilities

CVE-2022-32567

中危 5.4CVE-2022-32567 · Published 07/07/2022 · updated 17/06/2026

要点

CVE-2022-32567 是影响 jira misc custom fields (appfire) 的中危 (CVSS 5.4)漏洞。
未来 30 天内被利用的概率（EPSS）：0.59%，高于 48.3% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
jira misc custom fields appfire	`= 2.4.6`	No fix yet

Description

The Appfire Jira Misc Custom Fields (JMCF) app 2.4.6 for Atlassian Jira allows XSS via a crafted project name to the Add Auto Indexing Rule function.

References

marketplace.atlassian.com/apps/27136/jira-misc-custom-fields-jmcf · Product
syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-039.txt · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free