Atlassian Crucible review file upload resource cross-site scripting vulnerability

Atlassian Crucible is a suite of code review tools from Atlassian Australia. The tool provides a review process for reviewing code, discussing changes, sharing knowledge, and identifying defects. review file upload resource is one of the upload file repositories. A cross-site scripting...

CVE-2017-9509

The review file upload resource in Atlassian Crucible before version 4.4.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability through the charset of a previously uploaded file...

PT-2017-18978

Name of the Vulnerable Software and Affected Versions Atlassian Crucible versions prior to 4.4.1 Description The issue concerns a cross site scripting XSS vulnerability. It allows remote attackers to inject arbitrary HTML or JavaScript through the charset of a previously uploaded file, specifical...