CVE-2017-18093

This CVE affects Atlassian Fisheye and Crucible: before versions 4.4.3 (for 4.4.x line) and before 4.5.0 are vulnerable. The issue is a cross-site scripting (XSS) vulnerability in the location setting of a configured repository, exploitable by remote attackers who have permission to add or modify...

CVE-2017-18093

Various resources in Atlassian Fisheye and Crucible before version 4.4.3 the fixed version for 4.4.x and before 4.5.0 allow remote attackers who have permission to add or modify a repository to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability through the location...