Type:
Status:
Open
Priority:
Resolution:
Unresolved
Affects Version/s:
None
Fix Version/s:
None
Component/s:
None
Module:
BenAdmin
- Security
[Security Test]
{Input Validation}
Server Error gets displayed as soon as any Script is inserted in Template Name field.
1. Login as Admin
<html>Helll<script>alert('Attacked')</script></html>
made changes -
23/Jan/17 06:01 AM
Field
Original Value
New Value
Module
Parent values: BenAdmin(10100)
Parent values: BenAdmin(10100)Level 1 values: Security(10112)
made changes -
20/Mar/17 06:32 AM
Environment
Production
[ 10005
]
Severity
Medium
[ 13102
]
made changes -
01/Nov/17 11:13 PM
made changes -
04/Nov/17 06:35 AM
Environment_New
Production
[ 18442
]
{"report":{"apdex":1,"isInitial":true,"journeyId":"62859b8e-e348-44a1-af88-64a909b3afb6","key":"jira.project.issue.view-issue","navigationType":0,"readyForUser":835.1000000238419,"redirectCount":0,"resourceLoadedEnd":1036.1000000238419,"resourceLoadedStart":231.89999997615814,"resourceTiming":[{"duration":173.70000004768372,"initiatorType":"link","name":"https://jira.workterra.net/s/3003653444a1e1a85555cab7dcfb3a21-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/2e46d90b5cae895c9c38649c9d510130/_/download/contextbatch/css/_super/batch.css","startTime":231.89999997615814,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":231.89999997615814,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":405.60000002384186,"responseStart":0,"secureConnectionStart":0},{"duration":173.79999995231628,"initiatorType":"link","name":"https://jira.workterra.net/s/dd6a0911920485696ac20493290df627-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/3abe50d469404b639745df44b51476b6/_/download/contextbatch/css/jira.browse.project,jira.view.issue,project.issue.navigator,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&richediton=true","startTime":232.10000002384186,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":232.10000002384186,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":405.89999997615814,"responseStart":0,"secureConnectionStart":0},{"duration":174.09999990463257,"initiatorType":"link","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.css","startTime":232.30000007152557,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":232.30000007152557,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":406.39999997615814,"responseStart":0,"secureConnectionStart":0},{"duration":174.59999990463257,"initiatorType":"link","name":"https://jira.workterra.net/s/bd548f27bbf8f278bd83b60dd3284ed8-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:global-static-adgs/jira.webresources:global-static-adgs.css","startTime":232.30000007152557,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":232.30000007152557,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":406.89999997615814,"responseStart":0,"secureConnectionStart":0},{"duration":175.10000002384186,"initiatorType":"link","name":"https://jira.workterra.net/s/70725731a158a7140f19ddbd4201ba27-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:global-static/jira.webresources:global-static.css","startTime":232.5,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":232.5,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":407.60000002384186,"responseStart":0,"secureConnectionStart":0},{"duration":222.89999997615814,"initiatorType":"script","name":"https://jira.workterra.net/s/f2623af22c15df767ec6ff268ae0b8bd-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/2e46d90b5cae895c9c38649c9d510130/_/download/contextbatch/js/_super/batch.js?locale=en-US","startTime":232.60000002384186,"connectEnd":232.60000002384186,"connectStart":232.60000002384186,"domainLookupEnd":232.60000002384186,"domainLookupStart":232.60000002384186,"fetchStart":232.60000002384186,"redirectEnd":0,"redirectStart":0,"requestStart":232.60000002384186,"responseEnd":455.5,"responseStart":455.5,"secureConnectionStart":232.60000002384186},{"duration":258.5,"initiatorType":"script","name":"https://jira.workterra.net/s/6ce676f2a5bcc9651cef6e7956f05def-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/3abe50d469404b639745df44b51476b6/_/download/contextbatch/js/jira.browse.project,jira.view.issue,project.issue.navigator,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":232.70000004768372,"connectEnd":232.70000004768372,"connectStart":232.70000004768372,"domainLookupEnd":232.70000004768372,"domainLookupStart":232.70000004768372,"fetchStart":232.70000004768372,"redirectEnd":0,"redirectStart":0,"requestStart":232.70000004768372,"responseEnd":491.2000000476837,"responseStart":491.2000000476837,"secureConnectionStart":232.70000004768372},{"duration":261.5,"initiatorType":"script","name":"https://jira.workterra.net/s/ecf7ec549751ae117b778f0525d6d371-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/4.1.5/_/download/resources/com.atlassian.plugins.atlassian-chaperone:hotspot-tour/hotspot-tour.js?batch=false&locale=en-US","startTime":232.80000007152557,"connectEnd":232.80000007152557,"connectStart":232.80000007152557,"domainLookupEnd":232.80000007152557,"domainLookupStart":232.80000007152557,"fetchStart":232.80000007152557,"redirectEnd":0,"redirectStart":0,"requestStart":232.80000007152557,"responseEnd":494.3000000715256,"responseStart":494.3000000715256,"secureConnectionStart":232.80000007152557},{"duration":261.8000000715256,"initiatorType":"script","name":"https://jira.workterra.net/s/6aa3fcf1fac5fd551eee0b69077524e6-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/aae1242f5fc81cc6a5bb8bc963ccda29/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en-US","startTime":232.89999997615814,"connectEnd":232.89999997615814,"connectStart":232.89999997615814,"domainLookupEnd":232.89999997615814,"domainLookupStart":232.89999997615814,"fetchStart":232.89999997615814,"redirectEnd":0,"redirectStart":0,"requestStart":232.89999997615814,"responseEnd":494.7000000476837,"responseStart":494.7000000476837,"secureConnectionStart":232.89999997615814},{"duration":262.2000000476837,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":233.10000002384186,"connectEnd":233.10000002384186,"connectStart":233.10000002384186,"domainLookupEnd":233.10000002384186,"domainLookupStart":233.10000002384186,"fetchStart":233.10000002384186,"redirectEnd":0,"redirectStart":0,"requestStart":233.10000002384186,"responseEnd":495.3000000715256,"responseStart":495.3000000715256,"secureConnectionStart":233.10000002384186},{"duration":262.5,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":233.20000004768372,"connectEnd":233.20000004768372,"connectStart":233.20000004768372,"domainLookupEnd":233.20000004768372,"domainLookupStart":233.20000004768372,"fetchStart":233.20000004768372,"redirectEnd":0,"redirectStart":0,"requestStart":233.20000004768372,"responseEnd":495.7000000476837,"responseStart":495.7000000476837,"secureConnectionStart":233.20000004768372},{"duration":263,"initiatorType":"script","name":"https://jira.workterra.net/s/ecf7ec549751ae117b778f0525d6d371-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.js?locale=en-US","startTime":233.30000007152557,"connectEnd":233.30000007152557,"connectStart":233.30000007152557,"domainLookupEnd":233.30000007152557,"domainLookupStart":233.30000007152557,"fetchStart":233.30000007152557,"redirectEnd":0,"redirectStart":0,"requestStart":233.30000007152557,"responseEnd":496.3000000715256,"responseStart":496.3000000715256,"secureConnectionStart":233.30000007152557},{"duration":263.40000009536743,"initiatorType":"link","name":"https://jira.workterra.net/s/05c862146699bb029ceb0a489075e63b-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/bcd66e9a133a1b9f5fd14b56841e1c5b/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":233.39999997615814,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":233.39999997615814,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":496.8000000715256,"responseStart":0,"secureConnectionStart":0},{"duration":263.3000000715256,"initiatorType":"script","name":"https://jira.workterra.net/rest/api/1.0/shortcuts/805012/344f6dde0e779bc821c159302c8a4389/shortcuts.js?context=issuenavigation&context=issueaction","startTime":233.5,"connectEnd":233.5,"connectStart":233.5,"domainLookupEnd":233.5,"domainLookupStart":233.5,"fetchStart":233.5,"redirectEnd":0,"redirectStart":0,"requestStart":233.5,"responseEnd":496.8000000715256,"responseStart":496.8000000715256,"secureConnectionStart":233.5},{"duration":263.7999999523163,"initiatorType":"link","name":"https://jira.workterra.net/s/9095228fa10daa2d3e3d7d5760c95e91-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/72477c22780abda5f51fe696920d843f/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.css?jira.create.linked.issue=true&richediton=true","startTime":233.60000002384186,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":233.60000002384186,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":497.39999997615814,"responseStart":0,"secureConnectionStart":0},{"duration":263.89999997615814,"initiatorType":"script","name":"https://jira.workterra.net/s/c19a1b46e985d7fb85efaf27c8febfdd-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/72477c22780abda5f51fe696920d843f/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.js?jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":233.70000004768372,"connectEnd":233.70000004768372,"connectStart":233.70000004768372,"domainLookupEnd":233.70000004768372,"domainLookupStart":233.70000004768372,"fetchStart":233.70000004768372,"redirectEnd":0,"redirectStart":0,"requestStart":233.70000004768372,"responseEnd":497.60000002384186,"responseStart":497.60000002384186,"secureConnectionStart":233.70000004768372},{"duration":465.1999999284744,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:bigpipe-js/jira.webresources:bigpipe-js.js","startTime":234.30000007152557,"connectEnd":234.30000007152557,"connectStart":234.30000007152557,"domainLookupEnd":234.30000007152557,"domainLookupStart":234.30000007152557,"fetchStart":234.30000007152557,"redirectEnd":0,"redirectStart":0,"requestStart":234.30000007152557,"responseEnd":699.5,"responseStart":699.5,"secureConnectionStart":234.30000007152557}],"threshold":1000,"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":122,"responseStart":226,"responseEnd":227,"domLoading":229,"domInteractive":1088,"domContentLoadedEventStart":1088,"domContentLoadedEventEnd":1129,"domComplete":1288,"loadEventStart":1288,"loadEventEnd":1291,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[],"measures":[],"correlationId":"8a162d3aa83bb8","effectiveType":"4g","downlink":9.9,"rtt":0,"serverDuration":74,"dbReadsTimeInMs":16,"dbConnsTimeInMs":18,"applicationHash":"156decd7d2b4272533aa6cefc8294af635e1da97","experiments":[]}}
Bug
Medium
