medium5.4Public exploit code
CVE-2012-1500
Stored XSS vulnerability in UpdateFieldJson.jspa in JIRA 4.4.3 and GreenHopper before 5.9.8 allows an attacker to inject arbitrary script code.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- jira 4.4.3 / greenhopper < 5.9.8 - Multiple Vulnerabilities2012-09-04 · webapps · jsp
Impact
Stored XSS vulnerability in UpdateFieldJson.jspa in JIRA 4.4.3 and GreenHopper before 5.9.8 allows an attacker to inject arbitrary script code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Greenhopper | before 5.9.8 |
| Atlassian | Jira | Version 4.4.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://web.archive.org/web/20121014055829/http://www.cloudscan.me/2012/09/cve-2012-1500-ghs-5375-ghs-5642.html
- https://www.exploit-db.com/exploits/21052
- https://web.archive.org/web/20121014055829/http://www.cloudscan.me/2012/09/cve-2012-1500-ghs-5375-ghs-5642.html
- https://www.exploit-db.com/exploits/21052