[FE-7081] Several resources were vulnerable to XSS - CVE-2018-13392 - Create and track feature requests for Atlassian products.

XML

Word

Printable

Details

Type: Bug
Status: Closed (View Workflow)
Priority: Medium
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 4.6.0
Component/s: None
Labels:
- CVE-2018-13392
- advisory
- advisory-released
- cvss-medium
- security
- sxss
- xss

Symptom Severity:
Severity 2 - Major
Bug Fix Policy:
View Atlassian Server bug fix policy

Description

Several resources in Atlassian Fisheye and Crucible before version 4.6.0 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in linked issue keys.

Attachments

Issue Links

is related to

CRUC-8304 Several resources were vulnerable to XSS - CVE-2018-13392

Closed

Activity

People

Assignee:: Unassigned

Reporter:: Security Metrics Bot

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 13/Aug/2018 3:39 AM

Updated:: 13/Aug/2018 3:49 AM

Resolved:: 13/Aug/2018 3:42 AM