CVE-2017-18093 | BDVDB-2026-96899 Detail

Description#

Various resources in Atlassian Fisheye and Crucible before version 4.4.3 (the fixed version for 4.4.x) and before 4.5.0 allow remote attackers who have permission to add or modify a repository to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the location setting of a configured repository.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12018-02-19Record published in the CVE List.
2. Version 22024-09-17Most recent update recorded in the CVE List.