Lucene search

K
atlassianEjensbyATLASSIAN:FE-7163
HistoryFeb 14, 2019 - 9:15 p.m.

Stored XSS in administrative linker functionality through the href parameter - CVE-2018-20240

2019-02-1421:15:56
ejensby
jira.atlassian.com
142

0.001 Low

EPSS

Percentile

35.7%

The administrative linker functionality in Atlassian Fisheye before version 4.7.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the href parameter.

CPENameOperatorVersion
fisheyele4.6.1
fisheyelt4.7.0

0.001 Low

EPSS

Percentile

35.7%

Related for ATLASSIAN:FE-7163