We have identified and fixed a cross-site scripting (XSS) vulnerability in the Crucible's edit review details screen.
Affected versions are Crucible 2.2.0 to 2.3.7 inclusive.
XSS vulnerabilities potentially allow an attacker to embed their own JavaScript into a FishEye/Crucible page. You can read more about XSS attacks at various places on the web, including these:
- cgisecurity.com: http://www.cgisecurity.com/articles/xss-faq.shtml
- The Web Application Security Consortium: http://projects.webappsec.org/Cross-Site+Scripting
This issue is reported in our security advisory on these pages:
- is cloned from
-
CRUC-5309 XSS vulnerability in Crucible Review Reload
-
- Closed
-
XSS vulnerability in Edit Review Details
We have identified and fixed a cross-site scripting (XSS) vulnerability in the Crucible's edit review details screen.
Affected versions are Crucible 2.2.0 to 2.3.7 inclusive.
XSS vulnerabilities potentially allow an attacker to embed their own JavaScript into a FishEye/Crucible page. You can read more about XSS attacks at various places on the web, including these:
- cgisecurity.com: http://www.cgisecurity.com/articles/xss-faq.shtml
- The Web Application Security Consortium: http://projects.webappsec.org/Cross-Site+Scripting
This issue is reported in our security advisory on these pages:
- is cloned from
-
-
- Closed
-
-
Unassigned
-
Andrew
- Votes:
-
0 Vote for this issue
- Watchers:
-
1 Start watching this issue
- Created:
- Updated:
- Resolved: