Lucene search

MitreCVE-2022-36131

HistoryJul 22, 2022 - 1:15 p.m.

CVE-2022-36131

2022-07-2213:15:08

CWE-79

mitre

web.nvd.nist.gov

cve-2022-36131

better pdf exporter

atlassian jira

stored xss

pdf templates

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

36.9%

JSON

The Better PDF Exporter add-on 10.0.0 for Atlassian Jira is prone to stored XSS via a crafted description to the PDF Templates overview page.

Affected configurations

Nvd

Node

midori-globalbetter_pdf_exporterMatch10.0.0jira_data_center

midori-globalbetter_pdf_exporterMatch10.0.0jira_server

VendorProductVersionCPE
midori-globalbetter_pdf_exporter10.0.0cpe:2.3:a:midori-global:better_pdf_exporter:10.0.0:*:*:*:*:jira_data_center:*:*
midori-globalbetter_pdf_exporter10.0.0cpe:2.3:a:midori-global:better_pdf_exporter:10.0.0:*:*:*:*:jira_server:*:*

Vendor	Product	Version	CPE
midori-global	better_pdf_exporter	10.0.0	cpe:2.3:a:midori-global:better_pdf_exporter:10.0.0:::::jira_data_center::
midori-global	better_pdf_exporter	10.0.0	cpe:2.3:a:midori-global:better_pdf_exporter:10.0.0:::::jira_server::

References

marketplace.atlassian.com/apps/5167/better-pdf-exporter-for-jira?tab=overview&hosting=server

www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-038.txt

Social References

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

36.9%

JSON

Related for CVE-2022-36131