CVE-2018-20824

Name of the Vulnerable Software and Affected Versions: Jira versions prior to 7.13.1

Description: The issue allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the cyclePeriod parameter of the WallboardServlet resource.

Recommendations: For versions prior to 7.13.1, update to version 7.13.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the WallboardServlet resource until a patch is applied. Avoid using the cyclePeriod parameter in the affected resource until the issue is resolved.