CVE-2019-19679 - In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the Pre-Condition Summary entry point via the summary field of a Create Pre-Condition action for a new Test Issue

Back Back to CVE browser

MEDIUM

In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the Pre-Condition Summary entry point via the summary field of a Create Pre-Condition action for a new Test Issue

Published Dec 9, 2019

5.4

MEDIUM

CVSS 3.1

EPSS 0.63%

Description

In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the Pre-Condition Summary entry point via the summary field of a Create Pre-Condition action for a new Test Issue.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (1)

https://jira.xpand-it.com/browse/XRAY-4692
x_refsource_MISCExploitVendor Advisory

Link	Providers	Tags
https://jira.xpand-it.com/browse/XRAY-4692		x_refsource_MISCExploitVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 9, 2019

Updated Aug 5, 2024

Reserved Dec 9, 2019

Link CVE-2019-19679

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-19679

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-19679