description: The IncomingMailServers resource in Atlassian Jira from version 6.2.1 before version 7.4.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the messagesThreshold parameter.
problem types: Cross Site Scripting (XSS)
affected:
{
product: Jira
vendor: Atlassian
versions:
status: affected, version: from 6.2.1 prior to 7.4.4
}