CVE-2017-18092

The print snippet resource in Atlassian Crucible before version 4.4.3 the fixed version for 4.4.x and before 4.5.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability through the contents of a comment on the snippet...

CVE-2017-18092

CVE-2017-18092 affects Atlassian Crucible; the print snippet resource is vulnerable to cross-site scripting (XSS) via the contents of a comment on the snippet, in versions before 4.4.3 (the fixed 4.4.x line) and before 4.5.0. The underlying issue is rendering user-supplied comment content, allowi...