PT-2023-25665 · Atlassian · User Management For Bitbucket+2

Carl Nykvist · Publicado 2023-06-26 · Atualizado 2023-07-06 · CVE-2023-36662

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions User Management for Jira versions 2.0.0 through 2.17.1 User Management for Confluence versions 2.0.0 through 2.15.24 User Management for Bitbucket versions 2.2.2 through 2.15.24

Description The TechTime User Management components for Atlassian products are affected by a stored XSS issue on the Bulk User Actions page.

Recommendations For User Management for Jira versions 2.0.0 through 2.17.1, update to a version outside of this range to resolve the issue. For User Management for Confluence versions 2.0.0 through 2.15.24, update to a version outside of this range to resolve the issue. For User Management for Bitbucket versions 2.2.2 through 2.15.24, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to the Bulk User Actions page until a patch is available.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-36662

Produtos afetados

User Management For Bitbucket

User Management For Confluence

User Management For Jira

Referências · 4

• https://osv.dev/vulnerability/CVE-2023-36662 · Aviso do Fabricante
• https://t.me/cvenotify/53036 · Publicação no Telegram
• https://techtime.co.nz/display/TECHTIME/Security+Vulnerability+Affecting+User+Management · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-36662 · Nota de Segurança