Appfire

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Appfire records in CISA KEV

No Appfire vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jira Misc Custom Fields 1 record LOW Time To Sla 1 record LOW

Records

2 records

TI-2023-22037 CVE-2023-41588 · GHSA-3wrw-frxw-6j34

A cross-site scripting (XSS) vulnerability in Time to SLA plugin v10.13.5 allows…

LOW 28

A cross-site scripting (XSS) vulnerability in Time to SLA plugin v10.13.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the durationFormat parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00476 Published 2023-09-14 No fix listed CWE-79

TI-2022-14197 CVE-2022-32567 · GHSA-6755-mxr7-g7cm

The Appfire Jira Misc Custom Fields (JMCF) app 2.4.6 for Atlassian Jira allows XSS via a…

LOW 25

The Appfire Jira Misc Custom Fields (JMCF) app 2.4.6 for Atlassian Jira allows XSS via a crafted project name to the Add Auto Indexing Rule function.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00587 Published 2022-07-07 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0