CVE:CVE-2022-44726
CNNVD:CNNVD-202304-1329
TouchDown Timesheet Tracking for Jira是瑞士TouchDown公司的一个易于使用的时间表报告组件。
TouchDown Timesheet Tracking for Jira 4.1.4版本存在安全漏洞，该漏洞源于在calendar视图中存在存储型跨站脚本（XSS）漏洞。
solution:Upgrade timesheets-for-jira timesheet_tracking to a higher version than 4.1.4,and avoid the version 4.1.4
solution:Upgrade microsoft windows_10 to a higher version than -,20h2,21h1,21h2,22h2,1607,1809,and avoid the version 20h2,21h1,21h2,22h2,1607,1809; Upgrade microsoft windows_11 to a higher version than -,22h2,and avoid the version 22h2; Upgrade microsoft windows_7 to a higher version than -:sp1,and avoid the version -:sp1; Upgrade microsoft windows_8.1 to a higher version than -; Upgrade microsoft windows_rt_8.1 to a higher version than -; Upgrade microsoft windows_server_2008 to a higher version than -:sp2,r2:sp1,and avoid the version -:sp2,r2:sp1; Upgrade microsoft windows_server_2012 to a higher version than -,r2,and avoid the version r2; Upgrade microsoft windows_server_2016 to a higher version than -; Upgrade microsoft windows_server_2019 to a higher version than -; Upgrade microsoft windows_server_2022 to a higher version than -