[FE-7081] Several resources were vulnerable to XSS - CVE-2018-13392 - Create and track feature requests for Atlassian products.

Type: Bug
Resolution: Fixed
Priority: Medium
Fix Version/s: 4.6.0
Affects Version/s: None
Component/s: None
Labels:
- CVE-2018-13392
- advisory
- advisory-released
- cvss-medium
- security
- sxss
- xss

Symptom Severity:
Severity 2 - Major
Bug Fix Policy:
View Atlassian Server bug fix policy

Several resources in Atlassian Fisheye and Crucible before version 4.6.0 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in linked issue keys.

is related to

CRUC-8304 Several resources were vulnerable to XSS - CVE-2018-13392

Closed

No work has yet been logged on this issue.

Assignee:: Unassigned

Reporter:: Security Metrics Bot

Affected customers:: 0 This affects my team

Watchers:: 1 Start watching this issue

Created:: 13/Aug/2018 3:39 AM

Updated:: 13/Aug/2018 3:49 AM

Resolved:: 13/Aug/2018 3:42 AM

Details

Description

Attachments

Issue Links

Forms

Activity

[FE-7081] Several resources were vulnerable to XSS - CVE-2018-13392

People

Dates