Lucene search

K
atlassianPswiecickiATLASSIAN:CRUC-8044
HistoryJul 17, 2017 - 7:46 a.m.

Various XSS through a repository or review filename - CVE-2017-9508

2017-07-1707:46:38
pswiecicki
jira.atlassian.com
124

0.001 Low

EPSS

Percentile

28.8%

Various resources in Atlassian FishEye and Crucible before version 4.4.1 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the name of a repository or review file.

CPENameOperatorVersion
cruciblele4.3.1
cruciblelt4.4.1
cruciblele4.4.0

0.001 Low

EPSS

Percentile

28.8%

Related for ATLASSIAN:CRUC-8044