3 matches found
CVE-2018-5228
The /browse/raw resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the handling of response headers...
PT-2018-16819
Name of the Vulnerable Software and Affected Versions Atlassian Fisheye and Crucible versions prior to 4.5.3 Description The issue concerns a cross site scripting XSS vulnerability in the handling of response headers. This vulnerability allows remote attackers to inject arbitrary HTML or...
XSS through header injection in the /browse/~raw resource - CVE-2018-5228
The /browse/raw resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the handling of response headers...