Lucene search
+L

2 matches found

OSV
OSV
added 2018/04/24 12:29 p.m.8 views

CVE-2018-5228

The /browse/raw resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the handling of response headers...

6.1CVSS5.4AI score0.01212EPSS
SaveExploits0References3
Atlassian
Atlassian
added 2018/04/23 3:35 a.m.620 views

XSS through header injection in the /browse/~raw resource - CVE-2018-5228

The /browse/raw resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the handling of response headers...

6.1CVSS4.4AI score0.01212EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder