CVE-2017-9508

2017-08-2417:00:00

atlassian

www.cve.org

EPSS

0.001

Percentile

28.6%

JSON

Various resources in Atlassian Fisheye and Crucible before version 4.4.1 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the name of a repository or review file.

CNA Affected

[
  {
    "product": "Atlassian Fisheye and Crucible",
    "vendor": "Atlassian",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to version 4.4.1"
      }
    ]
  }
]

References

jira.atlassian.com/browse/CRUC-8044

jira.atlassian.com/browse/FE-6898

EPSS

0.001

Percentile

28.6%

JSON

Related for CVELIST:CVE-2017-9508