[XRAY-6823] Stored XSS in Test issue By [associated Test Executions message] - Xblend Issue Tracker

Xporter

XML

Word

Printable

Details

Type: Bug
Status: Closed
Priority: Major
Resolution: Done
Affects Version/s: 4.2.3
Fix Version/s: 4.2.5
Component/s: Core, Security
Labels:
- ignore_ait
- security_vulnerability_medium

Sprint:
XRAY 2020 Sprint 10
Requirement Status:

UNCOVERED

Description

Create Issue Type Test issue .
Create issue Type Test Execution and when create inject XSS Payload in Summary field
```
XSS"><img src=x onerror=alert(1)>
```
Go to Test issue, Then From Test Runs section click in Execute In
Then select "Existing Test Execution" and select the Test Executions that you have created.

Attachments

Attachments

- Sort By Name
- Sort By Date
- Ascending
- Descending
- Thumbnails
- List
- Download All

screenshot-1.png
359 kB
27/Nov/20 2:10 PM

Issue Links

clones

XRAY-6822 Stored XSS on Test issue by Pre-Condition Cucumber

Closed

Activity

People

Assignee:: Paulo Alves

Reporter:: Diamantino Campos

Votes:: 0 Vote for this issue

Watchers:: 0 Start watching this issue

Dates

Created:: 27/Nov/20 2:06 PM

Updated:: 19/Feb/21 5:38 PM

Resolved:: 19/Feb/21 5:38 PM

Time Tracking

Estimated:

Not Specified

Remaining:

0m

Logged:

5h 30m