Vulnerability Spotlight: Multiple vulnerabilities in Atlassian Jira
Ben Taylor of Cisco ASIG discovered multiple vulnerabilities in Atlassian Jira, from versions 7.6.4 to 8.1.0, including a persistent XSS in WikiRenderer triggered by a crafted comment or worklog entry and CSRF flaws in the login form that require no CSRF...