CVE-2017-18093

2018-02-1900:00:00

atlassian

www.cve.org

0.001 Low

EPSS

Percentile

35.7%

JSON

Various resources in Atlassian Fisheye and Crucible before version 4.4.3 (the fixed version for 4.4.x) and before 4.5.0 allow remote attackers who have permission to add or modify a repository to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the location setting of a configured repository.

CNA Affected

[
  {
    "product": "Fisheye and Crucible",
    "vendor": "Atlassian",
    "versions": [
      {
        "status": "affected",
        "version": "prior to 4.4.3"
      },
      {
        "status": "affected",
        "version": "prior to 4.5.0"
      }
    ]
  }
]

References

www.securityfocus.com/bid/103095

jira.atlassian.com/browse/CRUC-8175

jira.atlassian.com/browse/FE-7008

0.001 Low

EPSS

Percentile

35.7%

JSON

Related for CVELIST:CVE-2017-18093