Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Done
-
None
-
XRAYSERVERDG 2021 SPRINT 6
-
Description
Xray is vulnerable to XSS by injecting malicious javascript on the template description.
Steps to reproduce:
- Add malicious javascript to the template description
"><img src=x onerror=javascript:alert(1)>
- Go to an issue and click on Xray Document Generator dialog to export a single issue
- Hover the question mark and the javascript will run
Remediation steps: Sanitize template description