Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:FE-7282
HistoryApr 16, 2020 - 6:36 p.m.

XSS in the review resource through objectives - CVE-2020-4013

2020-04-1618:36:20
security-metrics-bot
jira.atlassian.com
35

EPSS

0.001

Percentile

29.2%

The review resource in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to inject arbitrary HTML or Javascript via a cross site scripting (XSS) vulnerability through the review objectives.

EPSS

0.001

Percentile

29.2%

Related for ATLASSIAN:FE-7282