-
Type:
Bug
-
Status:
Open
-
Priority:
Medium
-
Resolution:
Unresolved
-
Affects Version/s:
None
-
Fix Version/s:
None
-
Component/s:
None
-
-
-
-
Module:
BenAdmin
- Security
-
[Security Test]
{Input Validation}
Server Error gets displayed as soon as any Script is inserted in Template Name field.
1. Login as Admin
2. Go to Beta Company 1
3. Go to Import/Export -> Template Management
4. Click on Add New button to add new template
5. Insert following script data into Name field.
<html>Helll<script>alert('Attacked')</script></html>
6. Check for the server error displayed.
No workflow transitions have been executed yet.
{"report":{"apdex":1,"isInitial":true,"journeyId":"b2bd6da3-9c99-4d71-9f91-4cbd8a626e6c","key":"jira.project.issue.view-issue","navigationType":0,"readyForUser":969.9000000357628,"redirectCount":0,"resourceLoadedEnd":728.9000000357628,"resourceLoadedStart":332.4000000357628,"resourceTiming":[{"duration":7.099999964237213,"initiatorType":"link","name":"https://jira.workterra.net/s/3003653444a1e1a85555cab7dcfb3a21-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/2e46d90b5cae895c9c38649c9d510130/_/download/contextbatch/css/_super/batch.css","startTime":332.4000000357628,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":332.4000000357628,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":339.5,"responseStart":0,"secureConnectionStart":0},{"duration":7,"initiatorType":"link","name":"https://jira.workterra.net/s/dd6a0911920485696ac20493290df627-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/3abe50d469404b639745df44b51476b6/_/download/contextbatch/css/jira.browse.project,jira.view.issue,project.issue.navigator,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&richediton=true","startTime":332.69999998807907,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":332.69999998807907,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":339.69999998807907,"responseStart":0,"secureConnectionStart":0},{"duration":7.299999952316284,"initiatorType":"link","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.css","startTime":332.9000000357628,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":332.9000000357628,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":340.19999998807907,"responseStart":0,"secureConnectionStart":0},{"duration":7.800000011920929,"initiatorType":"link","name":"https://jira.workterra.net/s/bd548f27bbf8f278bd83b60dd3284ed8-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:global-static-adgs/jira.webresources:global-static-adgs.css","startTime":333,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":333,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":340.80000001192093,"responseStart":0,"secureConnectionStart":0},{"duration":8.199999988079071,"initiatorType":"link","name":"https://jira.workterra.net/s/70725731a158a7140f19ddbd4201ba27-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:global-static/jira.webresources:global-static.css","startTime":333.10000002384186,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":333.10000002384186,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":341.30000001192093,"responseStart":0,"secureConnectionStart":0},{"duration":260.80000001192093,"initiatorType":"script","name":"https://jira.workterra.net/s/f2623af22c15df767ec6ff268ae0b8bd-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/2e46d90b5cae895c9c38649c9d510130/_/download/contextbatch/js/_super/batch.js?locale=en-US","startTime":333.19999998807907,"connectEnd":333.19999998807907,"connectStart":333.19999998807907,"domainLookupEnd":333.19999998807907,"domainLookupStart":333.19999998807907,"fetchStart":333.19999998807907,"redirectEnd":0,"redirectStart":0,"requestStart":344.19999998807907,"responseEnd":594,"responseStart":441.5,"secureConnectionStart":333.19999998807907},{"duration":395.60000002384186,"initiatorType":"script","name":"https://jira.workterra.net/s/6ce676f2a5bcc9651cef6e7956f05def-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/3abe50d469404b639745df44b51476b6/_/download/contextbatch/js/jira.browse.project,jira.view.issue,project.issue.navigator,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":333.30000001192093,"connectEnd":333.30000001192093,"connectStart":333.30000001192093,"domainLookupEnd":333.30000001192093,"domainLookupStart":333.30000001192093,"fetchStart":333.30000001192093,"redirectEnd":0,"redirectStart":0,"requestStart":344.19999998807907,"responseEnd":728.9000000357628,"responseStart":442.9000000357628,"secureConnectionStart":333.30000001192093},{"duration":111,"initiatorType":"script","name":"https://jira.workterra.net/s/ecf7ec549751ae117b778f0525d6d371-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/4.1.5/_/download/resources/com.atlassian.plugins.atlassian-chaperone:hotspot-tour/hotspot-tour.js?batch=false&locale=en-US","startTime":333.5,"connectEnd":333.5,"connectStart":333.5,"domainLookupEnd":333.5,"domainLookupStart":333.5,"fetchStart":333.5,"redirectEnd":0,"redirectStart":0,"requestStart":345.10000002384186,"responseEnd":444.5,"responseStart":443.80000001192093,"secureConnectionStart":333.5},{"duration":111.69999998807907,"initiatorType":"script","name":"https://jira.workterra.net/s/6aa3fcf1fac5fd551eee0b69077524e6-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/aae1242f5fc81cc6a5bb8bc963ccda29/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en-US","startTime":333.60000002384186,"connectEnd":333.60000002384186,"connectStart":333.60000002384186,"domainLookupEnd":333.60000002384186,"domainLookupStart":333.60000002384186,"fetchStart":333.60000002384186,"redirectEnd":0,"redirectStart":0,"requestStart":348.60000002384186,"responseEnd":445.30000001192093,"responseStart":444.60000002384186,"secureConnectionStart":333.60000002384186},{"duration":112.5,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":333.60000002384186,"connectEnd":333.60000002384186,"connectStart":333.60000002384186,"domainLookupEnd":333.60000002384186,"domainLookupStart":333.60000002384186,"fetchStart":333.60000002384186,"redirectEnd":0,"redirectStart":0,"requestStart":349.80000001192093,"responseEnd":446.10000002384186,"responseStart":445.4000000357628,"secureConnectionStart":333.60000002384186},{"duration":113,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":333.80000001192093,"connectEnd":333.80000001192093,"connectStart":333.80000001192093,"domainLookupEnd":333.80000001192093,"domainLookupStart":333.80000001192093,"fetchStart":333.80000001192093,"redirectEnd":0,"redirectStart":0,"requestStart":349.80000001192093,"responseEnd":446.80000001192093,"responseStart":446.19999998807907,"secureConnectionStart":333.80000001192093},{"duration":113.59999996423721,"initiatorType":"script","name":"https://jira.workterra.net/s/ecf7ec549751ae117b778f0525d6d371-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.js?locale=en-US","startTime":333.9000000357628,"connectEnd":333.9000000357628,"connectStart":333.9000000357628,"domainLookupEnd":333.9000000357628,"domainLookupStart":333.9000000357628,"fetchStart":333.9000000357628,"redirectEnd":0,"redirectStart":0,"requestStart":350.19999998807907,"responseEnd":447.5,"responseStart":447,"secureConnectionStart":333.9000000357628},{"duration":16.30000001192093,"initiatorType":"link","name":"https://jira.workterra.net/s/05c862146699bb029ceb0a489075e63b-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/bcd66e9a133a1b9f5fd14b56841e1c5b/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":334.10000002384186,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":334.10000002384186,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":350.4000000357628,"responseStart":0,"secureConnectionStart":0},{"duration":127.10000002384186,"initiatorType":"script","name":"https://jira.workterra.net/rest/api/1.0/shortcuts/805012/81da1c7492d7ee698ae1cc31902498d9/shortcuts.js?context=issuenavigation&context=issueaction","startTime":334.30000001192093,"connectEnd":334.30000001192093,"connectStart":334.30000001192093,"domainLookupEnd":334.30000001192093,"domainLookupStart":334.30000001192093,"fetchStart":334.30000001192093,"redirectEnd":0,"redirectStart":0,"requestStart":353.5,"responseEnd":461.4000000357628,"responseStart":460.30000001192093,"secureConnectionStart":334.30000001192093},{"duration":17.399999976158142,"initiatorType":"link","name":"https://jira.workterra.net/s/9095228fa10daa2d3e3d7d5760c95e91-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/72477c22780abda5f51fe696920d843f/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.css?jira.create.linked.issue=true&richediton=true","startTime":334.4000000357628,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":334.4000000357628,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":351.80000001192093,"responseStart":0,"secureConnectionStart":0},{"duration":149.39999997615814,"initiatorType":"script","name":"https://jira.workterra.net/s/c19a1b46e985d7fb85efaf27c8febfdd-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/72477c22780abda5f51fe696920d843f/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.js?jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":334.4000000357628,"connectEnd":334.4000000357628,"connectStart":334.4000000357628,"domainLookupEnd":334.4000000357628,"domainLookupStart":334.4000000357628,"fetchStart":334.4000000357628,"redirectEnd":0,"redirectStart":0,"requestStart":355.10000002384186,"responseEnd":483.80000001192093,"responseStart":461.4000000357628,"secureConnectionStart":334.4000000357628},{"duration":115,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:bigpipe-js/jira.webresources:bigpipe-js.js","startTime":380.10000002384186,"connectEnd":380.10000002384186,"connectStart":380.10000002384186,"domainLookupEnd":380.10000002384186,"domainLookupStart":380.10000002384186,"fetchStart":380.10000002384186,"redirectEnd":0,"redirectStart":0,"requestStart":395.9000000357628,"responseEnd":495.10000002384186,"responseStart":494.5,"secureConnectionStart":380.10000002384186},{"duration":132.80000001192093,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:bigpipe-init/jira.webresources:bigpipe-init.js","startTime":380.19999998807907,"connectEnd":380.19999998807907,"connectStart":380.19999998807907,"domainLookupEnd":380.19999998807907,"domainLookupStart":380.19999998807907,"fetchStart":380.19999998807907,"redirectEnd":0,"redirectStart":0,"requestStart":422.5,"responseEnd":513,"responseStart":512.3000000119209,"secureConnectionStart":380.19999998807907},{"duration":55.19999998807907,"initiatorType":"xmlhttprequest","name":"https://jira.workterra.net/rest/webResources/1.0/resources","startTime":739.3000000119209,"connectEnd":739.3000000119209,"connectStart":739.3000000119209,"domainLookupEnd":739.3000000119209,"domainLookupStart":739.3000000119209,"fetchStart":739.3000000119209,"redirectEnd":0,"redirectStart":0,"requestStart":761.9000000357628,"responseEnd":794.5,"responseStart":793.5,"secureConnectionStart":739.3000000119209},{"duration":64.20000004768372,"initiatorType":"xmlhttprequest","name":"https://jira.workterra.net/rest/webResources/1.0/resources","startTime":831.1999999880791,"connectEnd":831.1999999880791,"connectStart":831.1999999880791,"domainLookupEnd":831.1999999880791,"domainLookupStart":831.1999999880791,"fetchStart":831.1999999880791,"redirectEnd":0,"redirectStart":0,"requestStart":862.1999999880791,"responseEnd":895.4000000357628,"responseStart":894.6000000238419,"secureConnectionStart":831.1999999880791}],"threshold":1000,"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":171,"responseStart":327,"responseEnd":379,"domLoading":331,"domInteractive":1017,"domContentLoadedEventStart":1017,"domContentLoadedEventEnd":1069,"domComplete":1236,"loadEventStart":1236,"loadEventEnd":1239,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[],"measures":[],"correlationId":"15a8507931784f","effectiveType":"4g","downlink":10,"rtt":0,"serverDuration":63,"dbReadsTimeInMs":15,"dbConnsTimeInMs":18,"applicationHash":"156decd7d2b4272533aa6cefc8294af635e1da97","experiments":[]}}
