Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

XSS on LDAP Server Settings page

Description

LDAP Settings page (/ldap-server.jsp) is susceptible to XSS - a {{<script>}} tag entered into the BaseDN setting here will be rendered on Server Settings → Profile Settings (/profile-settings.jsp)

Environment

Windows Server 2016

Activity

Show:
Fixed

Details

Assignee

Reporter

Labels

Fix versions

Priority

Created September 23, 2019 at 4:18 PM
Updated September 24, 2019 at 12:49 PM
Resolved September 24, 2019 at 12:49 PM