-
Bug
-
Resolution: Fixed
-
Medium
-
N/A
-
Severity 3 - Minor
-
The /plugins/servlet/branchreview resource in Atlassian Crucible before version 4.7.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the reviewedBranch parameter.
- is related to
-
FE-7251 XSS in the /plugins/servlet/branchreview resource through the reviewedBranch parameter - CVE-2019-15008
- Closed