Description
Cross-site scripting (XSS) vulnerability in Atlassian JIRA 3.6.2-#156 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a direct request to secure/ConfigureReleaseNote.jspa, which are not sanitized before being returned in an error page.
References
- ADV-2006-2472 vdb-entry
- 18575 vdb-entry
- jira-configurereleasenote-xss(27588) vdb-entry
- 20767 third-party-advisory
- http://pridels0.blogspot.com/2006/06/atlassian-jira-information-disclosure.html
- 26744 vdb-entry