[%22Vendor] XSS in various resources through the location setting of a configured repository - CVE-2017-18093 - Create and track feature requests for Atlassian products.

Type: Bug
Resolution: Fixed
Priority: Medium
Fix Version/s: 4.4.3, 4.5.0
Affects Version/s: None
Component/s: None
Labels:

Symptom Severity:
Severity 2 - Major
Bug Fix Policy:
View Atlassian Server bug fix policy

Various resources in Atlassian Fisheye and Crucible before version 4.4.3 (the fixed version for 4.4.x) and before 4.5.0 allow remote attackers who have permission to add or modify a repository to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the location setting of a configured repository.

is related to

CRUC-8175 XSS in various resources through the location setting of a configured repository - CVE-2017-18093

Closed

No work has yet been logged on this issue.

Assignee:: Unassigned

Reporter:: Security Metrics Bot

Affected customers:: 0 This affects my team

Watchers:: 1 Start watching this issue

Created:: 02/Feb/2018 12:11 AM

Updated:: 19/Feb/2018 2:59 AM

Resolved:: 02/Feb/2018 3:19 AM

Details

Description

Attachments

Issue Links

Forms

Activity

[FE-7008] XSS in various resources through the location setting of a configured repository - CVE-2017-18093

People

Dates