-
Bug
-
Resolution: Fixed
-
Medium
-
N/A
-
Severity 3 - Minor
-
The /plugins/servlet/branchreview resource in Atlassian Fisheye before version 4.7.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the reviewedBranch parameter.
- relates to
-
CRUC-8441 XSS in the /plugins/servlet/branchreview resource through the reviewedBranch parameter - CVE-2019-15008
- Closed