Description
All versions of atlasboard-atlassian-package prior to 0.4.2 are vulnerable to Cross-Site Scripting (XSS). The package fails to properly sanitize user input that is rendered as HTML, which may allow attackers to execute arbitrary JavaScript in a victim’s browser. This requires attackers being able to change issue summaries in Jira tickets.
Recommendation
No fix is available yet. Followings are affected versions:
- >= 0.0.0
References
Could your website be exposed too?
SmartScanner can check your website for Cross-Site Scripting in atlasboard-atlassian-package and gives you actionable findings to investigate.
Start a free scanRelated Issues
- CKEditor 5 cross-site scripting (XSS) vulnerability in the clipboard package - ckeditor5 - CVE-2025-58064
- CKEditor 5 cross-site scripting (XSS) vulnerability in the clipboard package - CVE-2025-58064
- Bootstrap Cross-site Scripting vulnerability - bootstrap - GHSA-7mvr-5x2g-wfc8 - CVE-2018-14042
- Cross-Site Scripting in @progress/kendo-angular-editor - Vulnerability
You might also like:
See something that needs correcting? Let us knowUpdated January 09, 2023