CVE-2018-20824

The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS)…

published May 3, 2019

CVSS
—
EPSS
38%
Percentile
98.6
In the wild
Unconfirmed
What it is

The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the cyclePeriod parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.37986 · 98.6th percentile
Published
2019-05-03T19:26Z
EPSS history
Timeline
  • 22 SEP 03:16Z
    EPSS moved 38% → 25%
    epss
  • 06 SEP 03:12Z
    EPSS moved 38% → 25%
    epss
  • 30 AUG 16:01Z
    EPSS moved 25% → 38%
    epss
  • 29 AUG 04:38Z
    EPSS moved 38% → 25%
    epss
  • 03 MAY 19:26Z
    The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS)…
    cvelistv5