jira vulnerabilities

1 known vulnerability in jira from Xwiki-contrib. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.7 High severity

  jira: Improper Restriction of XML External Entity Reference

  CVE-2025-31487Apr 3, 2025Xwiki-contrib

  The XWiki JIRA extension provides various integration points between XWiki and JIRA (macros, UI, CKEditor plugin). If the JIRA macro is installed, any logged in XWiki user could edit his/her user profile wiki page and use that JIRA macro, specifying a fake JIR