← All advisories

Medium severity5.4NVD Advisory· Published Jul 7, 2022· Updated Jun 17, 2026

CVE-2022-32567

CVE-2022-32567

Description

The Appfire Jira Misc Custom Fields (JMCF) app 2.4.6 for Atlassian Jira allows XSS via a crafted project name to the Add Auto Indexing Rule function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Appfire/Jira Misc Custom Fields2 versions
cpe:2.3:a:appfire:jira_misc_custom_fields:2.4.6:*:*:*:*:jira_data_center:*:*+ 1 more
- cpe:2.3:a:appfire:jira_misc_custom_fields:2.4.6:*:*:*:*:jira_data_center:*:*
- cpe:2.3:a:appfire:jira_misc_custom_fields:2.4.6:*:*:*:*:jira_server:*:*
Appfire/Jira Misc Custom Fields (JMCF) appdescription
Atlassian/Jira Misc Custom Fieldsllm-create
Range: <=2.4.6

Patches

Vulnerability mechanics

References

2

www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-039.txtnvdExploitThird Party Advisory
marketplace.atlassian.com/apps/27136/jira-misc-custom-fields-jmcfnvdProductThird Party Advisory

News mentions

0

No linked articles in our index yet.