PT-2019-10035

Name of the Vulnerable Software and Affected Versions: Atlassian Fisheye and Crucible versions prior to 4.7.0 Description: The issue allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the wbuser parameter. This occurs in the Edit upload...