Vulnerability in Atlassian Fisheye And Crucible
CVE-2018-13388
The review attachment resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in attached files.
EPSS: 0.002 (37.7th percentile) — read the EPSS interpretation.
Affected products
- Atlassian Fisheye And Crucible — versions unspecified
References
- jira.atlassian.com/browse/CRUC-8209 (x_refsource_CONFIRM)
- jira.atlassian.com/browse/FE-7059 (x_refsource_CONFIRM)
- 104717 (vdb-entry, x_refsource_BID)