Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:CRUC-8466
HistoryApr 16, 2020 - 6:41 p.m.

XSS in the review resource through objectives - CVE-2020-4013

2020-04-1618:41:40
security-metrics-bot
jira.atlassian.com
40

EPSS

0.001

Percentile

29.2%

The review resource in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to inject arbitrary HTML or Javascript via a cross site scripting (XSS) vulnerability through the review objectives.

EPSS

0.001

Percentile

29.2%

Related for ATLASSIAN:CRUC-8466