• Type: Bug
• Resolution: Fixed
• Priority: Medium
• Fix Version/s: 4.4.1
• Affects Version/s: 4.1.0, 4.4.0
• Component/s: None
• Labels:

  • CVE-2017-9507
  • advisory
  • advisory-released
  • cvss-medium
  • security
  • xss

[CRUC-8043] XSS in review dashboard through a custom filter title - CVE-2017-9507

Said made changes - 05/Dec/2019 2:15 PM

Labels

Original: CVE-2017-9507 advisory advisory-released cvss-medium security

New: CVE-2017-9507 advisory advisory-released cvss-medium security xss

Owen made changes - 16/Oct/2018 8:15 AM

Workflow

Original: FE-CRUC Bug Workflow [ 2941989 ]

New: JAC Bug Workflow v3 [ 2955927 ]

Owen made changes - 16/Oct/2018 4:41 AM

Workflow

Original: FECRU Development Workflow - Triage - Restricted [ 2409565 ]

New: FE-CRUC Bug Workflow [ 2941989 ]

David Black made changes - 29/Jan/2018 6:31 AM

Remote Link

Original: This issue links to "Page (Extranet)" [ 314235 ]

David Black made changes - 30/Aug/2017 6:16 AM

Labels

Original: CVE-2017-9507 advisory-released cvss-medium security

New: CVE-2017-9507 advisory advisory-released cvss-medium security

David Black made changes - 24/Aug/2017 2:02 AM

Labels

Original: advisory-released cvss-medium security

New: CVE-2017-9507 advisory-released cvss-medium security

David Black made changes - 24/Aug/2017 2:02 AM

Summary

Original: XSS in review dashboard through a custom filter title

New: XSS in review dashboard through a custom filter title - CVE-2017-9507

David Black made changes - 24/Aug/2017 1:30 AM

Description

Original: The review dashboard resource in Atlassian Crucible from version 4.1.0 before version 4.4.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the review filter title parameter.

New: The review dashboard resource in Atlassian Crucible from version 4.1.0 before version 4.4.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the review filter title parameter.

David Black made changes - 24/Aug/2017 1:29 AM

Description

Original: The review dashboard resource in Atlassian Crucible from version 4.1.0 before version 4.4.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the review filter title parameter.

New: The review dashboard resource in Atlassian Crucible from version 4.1.0 before version 4.4.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the review filter title parameter.

David Black made changes - 24/Aug/2017 1:26 AM

Affects Version/s		New: 4.1.0 [ 61350 ]
Affects Version/s	Original: 3.10.4 [ 61344 ]

Load more older history items