TLDR Tech / InfoSec
Stored XSS Vulnerability in Jira Work Management Could Enable Full Organization Takeover
SnapSec researchers discovered a stored XSS vulnerability in Atlassian Jira Work Management's custom priority settings, where the Icon URL field lacked backend validation and output encoding, allowing a malicious JavaScript payload to be persisted to the database. A Product Admin, a low-privilege role with no access to Confluence or Service Management, can plant the payload in the priorities configuration panel, where it silently executes in a Super Admin's browser during organic page visits and issues a hidden organization invitation that grants the attacker full multi-product Atlassian access. Organizations should enforce strict input validation and output encoding across all administrative configuration surfaces and audit access-control models to ensure that partially privileged roles cannot influence global application behavior.
Read the full story