Lucene search

K
atlassianEjensbyATLASSIAN:FE-7162
HistoryFeb 14, 2019 - 8:50 p.m.

XSS in edit upload for a review through the wbuser parameter - CVE-2018-20241

2019-02-1420:50:09
ejensby
jira.atlassian.com
140

EPSS

0.001

Percentile

35.4%

The Edit upload resource for a review in Atlassian Fisheye before version 4.7.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the wbuser parameter.

EPSS

0.001

Percentile

35.4%

Related for ATLASSIAN:FE-7162