[%22Issue] XSS in the review attachment resource - CVE-2018-13388 - Create and track feature requests for Atlassian products.

Type: Bug
Resolution: Fixed
Priority: Medium
Fix Version/s: 4.5.3, 4.6.0
Affects Version/s: None
Component/s: None
Labels:

Symptom Severity:
Severity 2 - Major
Bug Fix Policy:
View Atlassian Server bug fix policy

The review attachment resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in attached files.

was cloned as

FE-7059 XSS in the review attachment resource - CVE-2018-13388

Closed

mentioned in: Page Failed to load

Assignee:: Unassigned

Reporter:: Security Metrics Bot

Affected customers:: 0 This affects my team

Watchers:: 1 Start watching this issue

Created:: 02/Feb/2018 12:11 AM

Updated:: 09/Jul/2018 5:17 AM

Resolved:: 02/Feb/2018 3:36 AM

Details

Description

Attachments

Issue Links

Forms

Activity

[CRUC-8209] XSS in the review attachment resource - CVE-2018-13388

People

Dates