CVE-2017-14594: XSS
The printable searchrequest issue resource in Atlassian Jira before version 7.2.12 and from version 7.3.0 before 7.6.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the jqlQuery query parameter.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14594?
CVE-2017-14594 has a medium severity rating due to its potential for exploitation through cross-site scripting (XSS).
How do I fix CVE-2017-14594?
To fix CVE-2017-14594, upgrade Atlassian Jira to version 7.2.12 or from 7.3.0 to 7.6.1 or later.
What impact does CVE-2017-14594 have on users?
CVE-2017-14594 allows remote attackers to inject arbitrary HTML or JavaScript, potentially compromising user data.
Which versions of Atlassian Jira are affected by CVE-2017-14594?
CVE-2017-14594 affects Atlassian Jira versions prior to 7.2.12 and versions from 7.3.0 up to but not including 7.6.1.
Is CVE-2017-14594 related to any other vulnerabilities?
CVE-2017-14594 is a specific XSS vulnerability and while it may not directly relate to other CVEs, it is part of a broader category of web application security issues.