CVE-2013-5319
published 2013-08-20CVE-2013-5319: Cross-site scripting (XSS) vulnerability in secure/admin/user/views/deleteuserconfirm.jsp in the Admin Panel in Atlassian JIRA before 6.0.5 allows remote…
PriorityP418medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
2.15%
80.0th percentile
Cross-site scripting (XSS) vulnerability in secure/admin/user/views/deleteuserconfirm.jsp in the Admin Panel in Atlassian JIRA before 6.0.5 allows remote attackers to inject arbitrary web script or HTML via the name parameter to secure/admin/user/DeleteUser!default.jspa.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| atlassian | jira | <= 6.0.4 | — |
| atlassian | jira | — | — |
| atlassian | jira | — | — |
| atlassian | jira | — | — |
| atlassian | jira | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://cxsecurity.com/issue/WLB-2013080065http://packetstormsecurity.com/files/122721http://secunia.com/advisories/54417http://www.securityfocus.com/bid/61647http://www.zeroscience.mk/en/vulnerabilities/ZSL-2013-5151.phphttps://jira.atlassian.com/browse/JRA/fixforversion/33790https://jira.atlassian.com/i#browse/JRA-34160https://jira.atlassian.com/secure/ReleaseNote.jspa?projectId=10240&version=33790http://cxsecurity.com/issue/WLB-2013080065http://packetstormsecurity.com/files/122721http://secunia.com/advisories/54417http://www.securityfocus.com/bid/61647http://www.zeroscience.mk/en/vulnerabilities/ZSL-2013-5151.phphttps://jira.atlassian.com/browse/JRA/fixforversion/33790https://jira.atlassian.com/i#browse/JRA-34160https://jira.atlassian.com/secure/ReleaseNote.jspa?projectId=10240&version=33790
2013-08-20
Published