CVE-2006-3338: XSS

Published Jul 3, 2006

Updated

Cross-site scripting (XSS) vulnerability in Atlassian JIRA 3.6.2-#156 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a direct request to secure/ConfigureReleaseNote.jspa, which are not sanitized before being returned in an error page.

Affected Software

1 affected component

Atlassian Jira=3.6.2_156

Event History

Jul 3, 2006

CVE Published

06:05 PM

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2006-3338?

CVE-2006-3338 is classified as a medium severity vulnerability due to its potential for cross-site scripting (XSS) attacks.

How do I fix CVE-2006-3338?

To fix CVE-2006-3338, upgrade Atlassian JIRA to a version that addresses this XSS vulnerability.

What versions of Atlassian JIRA are affected by CVE-2006-3338?

CVE-2006-3338 affects Atlassian JIRA version 3.6.2-#156.

Can CVE-2006-3338 be exploited remotely?

Yes, CVE-2006-3338 can be exploited remotely by injecting arbitrary web script or HTML through specific requests.

What are the potential impacts of CVE-2006-3338?

The potential impacts of CVE-2006-3338 include unauthorized script execution, session hijacking, and user data exposure.