ByteOS Network

NVD Vulnerability Details :

CVE-2016-4318

Deferred

Source-cret@cert.org

Published At-10 Apr, 2017 | 03:59

Updated At-20 Apr, 2025 | 01:37

Atlassian JIRA Server before 7.1.9 has XSS in project/ViewDefaultProjectRoleActors.jspa via a role name.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Type	Version	Base score	Base severity	Vector
Primary	3.0	4.8	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Primary	2.0	3.5	LOW	AV:N/AC:M/Au:S/C:N/I:P/A:N

>>jira>>Versions up to 7.1.8(inclusive)

CWE ID	Type	Source
CWE-79	Primary	nvd@nist.gov

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/97516	cret@cert.org	Third Party Advisory VDB Entry
https://confluence.atlassian.com/jiracore/jira-core-7-1-x-release-notes-802161668.html#JIRACore7.1.xreleasenotes-v7.1.9v7.1.9-06July2016	cret@cert.org	N/A
https://jira.atlassian.com/browse/JRA-61861	cret@cert.org	N/A
https://jira.atlassian.com/browse/JRASERVER-61861	cret@cert.org	Issue Tracking
https://jira.atlassian.com/secure/ReleaseNote.jspa?projectId=10240&version=62034	cret@cert.org	N/A
http://www.securityfocus.com/bid/97516	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://confluence.atlassian.com/jiracore/jira-core-7-1-x-release-notes-802161668.html#JIRACore7.1.xreleasenotes-v7.1.9v7.1.9-06July2016	af854a3a-2127-422b-91ae-364da2661108	N/A
https://jira.atlassian.com/browse/JRA-61861	af854a3a-2127-422b-91ae-364da2661108	N/A
https://jira.atlassian.com/browse/JRASERVER-61861	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking
https://jira.atlassian.com/secure/ReleaseNote.jspa?projectId=10240&version=62034	af854a3a-2127-422b-91ae-364da2661108	N/A