[XRAY-6940] Stored XSS at Xray Server in [Execution Defects] by [Create Sub-Task notification] - Xblend Issue Tracker

Xporter

XML

Word

Printable

Details

Type: Bug
Status: Closed
Priority: Major
Resolution: Done
Affects Version/s: 4.2.3
Fix Version/s: 4.2.7
Component/s: Core, Security
Labels:

Sprint:
XRAY 2021 Sprint 2

Description

Create Issue Type Test issue with payload

ola "><img src=x onerror=alert('Attacker')>

Create issue Type Test Execution
From Test Execution go to Test section and add Test issue.
Now click in Execution Details or Execute to edit Execution Details.
From Execution Defects box Click in Create Sub-Task
Now from Execution Defects. box Click in Create Sub-Task and add payload
```
ola "><img src=x onerror=alert('Attacker')>
```
When you click on the Create button, the payload will reflect on you.

Attachments

Activity

People

Assignee:: Xavier Fernandes

Reporter:: Diamantino Campos

Votes:: 0 Vote for this issue

Watchers:: 0 Start watching this issue

Dates

Created:: 08/Jan/21 4:13 PM

Updated:: 18/Feb/21 5:14 PM

Resolved:: 21/Jan/21 11:04 AM

Time Tracking

Estimated:

0m

Remaining:

0m

Logged:

4h 30m