Atlassian JIRA FishEye Plugin Multiple HTML Injection Vulnerabilities

Bugtraq ID:	40962
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 18 2010 12:00AM
Updated:	Jun 18 2010 12:00AM
Credit:	Atlassian
Vulnerable:	Atlassian JIRA Fisheye Plugin 3.0.16 Atlassian JIRA Fisheye Plugin 3.0.10 Atlassian JIRA Fisheye Plugin 2.5 Atlassian JIRA Fisheye Plugin 2.4 Atlassian JIRA Fisheye Plugin 2.3
Not Vulnerable:	Atlassian JIRA Fisheye Plugin 3.0.17

Atlassian JIRA FishEye Plugin Multiple HTML Injection Vulnerabilities

JIRA FishEye Plugin is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input.

Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

Versions prior to JIRA FishEye plugin 3.0.17 are vulnerable.

Atlassian JIRA FishEye Plugin Multiple HTML Injection Vulnerabilities

Solution:
Updates are available; please see the references for more information.


Atlassian JIRA Fisheye Plugin 3.0.16

• Atlassian jira-fisheye-plugin-3.0.17-distribution.zip
  https://plugins.atlassian.com/server/1.0/download/pluginVersion/23073

Atlassian JIRA FishEye Plugin Multiple HTML Injection Vulnerabilities

References:

• JIRA FishEye Plugin Product Page (Atlassian)
  
• JIRA FishEye Plugin Security Advisory 2010-06-18 (Atlassian)