The review coverage resource in Atlassian Fisheye and Crucible before version 4.8.2 allows remote attackers to inject arbitrary HTML or Javascript via a cross site scripting (XSS) vulnerability through the committerFilter parameter.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

Atlassian

Crucible

Affected Versions:

unspecified

Atlassian

Fisheye

Affected Versions:

unspecified

References

https://jira.atlassian.com/browse/FE-7298

https://jira.atlassian.com/browse/CRUC-8482

Published: 2020-06-01T06:35:34.336809Z

Last Modified: 2024-09-17T03:42:59.732Z

Copied to clipboard!