590 matches found
CVE-2017-14588
Various resources in Atlassian Fisheye and Crucible before version 4.4.2 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the dialog parameter...
CVE-2017-14588
CVE-2017-14588 affects Atlassian FishEye and Crucible, prior to version 4.4.2. The root cause is an improper handling of the dialog parameter that enables cross-site scripting (XSS), allowing remote attackers to inject arbitrary HTML or JavaScript. The impact is exposure for affected resources; s...
CVE-2017-14588: Improper Neutralization of Input During Web Page Generation
Various resources in Atlassian Fisheye and Crucible before version 4.4.2 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the dialog parameter...
PT-2017-13563
Name of the Vulnerable Software and Affected Versions Atlassian Fisheye and Crucible versions prior to 4.4.2 Description The administration user deletion resource in Atlassian Fisheye and Crucible contains a cross site scripting XSS vulnerability in the uname parameter, allowing remote attackers ...
CVE-2017-14587: Improper Neutralization of Input During Web Page Generation
The administration user deletion resource in Atlassian Fisheye and Crucible before version 4.4.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the uname parameter...
Atlassian FishEye and Crucible mostActiveCommitters Information Disclosure (CVE-2017-9512)
An information disclosure vulnerability exists in Atlassian FishEye and Crucible. The vulnerability is due to a lack of permission check on mostActiveCommitters.do. A remote, unauthenticated attacker can exploit this vulnerability by sending a request to mostActiveCommitters.do...
Atlassian FishEye and Crucible Detection (HTTP)
HTTP based detection of Atlassian FishEye and Crucible. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Atlassian FishEye repository changelog resource cross-site scripting vulnerability
Atlassian FishEye is a suite of source code repository deep view software from Atlassian Australia. The software provides navigation, search, historical reporting and change analysis. repository changelog resource is one of the updated repositories. A cross-site scripting vulnerability exists in...
Atlassian FishEye and Crucible Multiple Vulnerabilities
Atlassian FishEye and Crucible is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Atlassian FishEye and Crucible Path Traversal Vulnerabilities
Atlassian FishEye and Crucible are both products of the Australian company Atlassian, FishEye is a suite of software for deep viewing of source code repositories and Crucible is a suite of code review tools. A path traversal vulnerability exists in the MultiPathResource class in Atlassian FishEye...
Atlassian FishEye and Crucible Cross-Site Scripting Vulnerabilities
Atlassian FishEye and Crucible are both products of the Australian company Atlassian, FishEye is a suite of software for deep viewing of source code repositories and Crucible is a suite of code review tools. A cross-site scripting vulnerability exists in multiple repositories in Atlassian FishEye...
Atlassian FishEye and Crucible Information Disclosure Vulnerabilities
Atlassian FishEye and Crucible are both products of the Australian company Atlassian. FishEye is an in-depth viewer of source code repositories, Crucible is a set of code review tools, and mostActiveCommitters.do resource is one of the development repositories. A security vulnerability exists in...
CVE-2017-9511
The MultiPathResource class in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote attackers to read arbitrary files via a path traversal vulnerability when Fisheye or Crucible is running on the Microsoft Windows operating system...
Path traversal
The MultiPathResource class in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote attackers to read arbitrary files via a path traversal vulnerability when Fisheye or Crucible is running on the Microsoft Windows operating system...
CVE-2017-9511
The MultiPathResource class in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote attackers to read arbitrary files via a path traversal vulnerability when Fisheye or Crucible is running on the Microsoft Windows operating system...
CVE-2017-9511
The MultiPathResource class in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote attackers to read arbitrary files via a path traversal vulnerability when Fisheye or Crucible is running on the Microsoft Windows operating system...
CVE-2017-9511
The CVE-2017-9511 entry affects Atlassian FishEye and Crucible (before 4.4.1). Summary: a path traversal bug in the MultiPathResource class on Windows allows anonymous remote attackers to read arbitrary files. Root cause: improper handling of file paths in the MultiPathResource implementation. Im...
CVE-2017-9511
The MultiPathResource class in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote attackers to read arbitrary files via a path traversal vulnerability when Fisheye or Crucible is running on the Microsoft Windows operating system...
CVE-2017-9510
The repository changelog resource in Atlassian Fisheye before version 4.4.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability through the start date and end date parameters...
Cross site scripting
The repository changelog resource in Atlassian Fisheye before version 4.4.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability through the start date and end date parameters...