-
Bug
-
Resolution: Fixed
-
Medium
-
N/A
-
Severity 3 - Minor
-
The review resource in Atlassian Fisheye before version 4.7.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the name of a missing branch.
- relates to
-
CRUC-8439 XSS in the the review resource through the name of a missing branch - CVE-2019-15007
- Closed