Vulnerability in Atlassian Fisheye And Crucible
CVE-2018-13392
Several resources in Atlassian Fisheye and Crucible before version 4.6.0 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in linked issue keys.
EPSS: 0.005 (66.1th percentile) — read the EPSS interpretation.
Affected products
- Atlassian Fisheye And Crucible — versions unspecified
References
- jira.atlassian.com/browse/CRUC-8304 (x_refsource_CONFIRM)
- jira.atlassian.com/browse/FE-7081 (x_refsource_CONFIRM)
- 105096 (vdb-entry, x_refsource_BID)