CVE-2022-32567: Appfire Jira Misc Custom Fields

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

The Appfire Jira Misc Custom Fields (JMCF) app 2.4.6 for Atlassian Jira allows XSS via a crafted project name to the Add Auto Indexing Rule function.

Affected products

• Appfire Jira Misc Custom Fields: version 2.4.6 only

Published 2022-07-07. Last modified 2026-06-17.