Cross site scripting

2017-10-1118:29:00

PRIOn knowledge base

www.prio-n.com

0.002 Low

EPSS

Percentile

54.8%

JSON

Various resources in Atlassian Fisheye and Crucible before version 4.4.2 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the dialog parameter.

CPENameOperatorVersion
cruciblele4.4.1
fisheyele4.4.1

CPE	Name	Operator	Version
	crucible	le	4.4.1
	fisheye	le	4.4.1

References

www.securityfocus.com/bid/101268

jira.atlassian.com/browse/CRUC-8113

jira.atlassian.com/browse/FE-6935

0.002 Low

EPSS

Percentile

54.8%

JSON

Related for PRION:CVE-2017-14588