Description
The Trello board importer resource in Atlassian Jira before version 7.6.1 allows remote attackers who can convince a Jira administrator to import their Trello board to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the title of a Trello card.
Remediation
References
Related Vulnerabilities
Apache Traffic Server Uncontrolled Resource Consumption Vulnerability (CVE-2018-8005)
MediaWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2020-10960)
PHP Improper Input Validation Vulnerability (CVE-2007-4784)
Family Connections Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-4338)