Lucene search

K
atlassianPswiecickiATLASSIAN:CRUC-8043
HistoryJul 17, 2017 - 7:43 a.m.

XSS in review dashboard through a custom filter title - CVE-2017-9507

2017-07-1707:43:18
pswiecicki
jira.atlassian.com
83

0.001 Low

EPSS

Percentile

28.8%

The review dashboard resource in Atlassian Crucible from version 4.1.0 before version 4.4.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the review filter title parameter.

CPENameOperatorVersion
cruciblelt4.4.1
cruciblele4.1.0
cruciblele4.4.0

0.001 Low

EPSS

Percentile

28.8%

Related for ATLASSIAN:CRUC-8043