CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda

CVE-2023-6905

CVE-2023-6903

CVE-2023-6904

CVE-2023-3907

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Reflected Cross-Site Scripting (RXSS) vulnerability in the TeamManagement.jspa endpoint. The affected versions are before version 8.20.8.

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Reflected Cross-Site Scripting (RXSS) vulnerability in the TeamManagement.jspa endpoint.

The affected versions are before version 8.20.8.

_Affected versions:_

*   version < 8.20.8

_Fixed versions:_

*   8.20.8

Headline

CVE-2022-36801: [JRASERVER-73740] Reflected XSS on /secure/TeamManagement.jspa via "planUrl" parameter - CVE-2022-36801

CVE: Latest News