cve/2018/CVE-2018-20824.md

CVE-2018-20824

Description

The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the cyclePeriod parameter.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/Elsfa7-110/kenzer-templates
• https://github.com/Faizee-Asad/JIRA-Vulnerabilities
• https://github.com/UGF0aWVudF9aZXJv/Atlassian-Jira-pentesting
• https://github.com/d4n-sec/d4n-sec.github.io
• https://github.com/imhunterand/JiraCVE
• https://github.com/merlinepedra/nuclei-templates
• https://github.com/merlinepedra25/nuclei-templates
• https://github.com/sobinge/nuclei-templates
• https://github.com/sushantdhopat/JIRA_testing