• Type: Bug
• Resolution: Fixed
• Priority: Low
• Fix Version/s: 4.8.1, 4.8.3
• Affects Version/s: 4.8.0
• Component/s: Repositories
• Labels:

  • advisory
  • advisory-released
  • bugbounty
  • cve-2020-4013
  • cvss-medium
  • release-48x
  • security
  • sxss
  • xss

[FE-7282] XSS in the review resource through objectives - CVE-2020-4013

Marek Parfianowicz made changes - 09/Nov/2023 9:44 AM

Labels

Original: advisory advisory-released bugbounty cve-2020-4013 cvss-medium release-48x release-490 security sxss xss

New: advisory advisory-released bugbounty cve-2020-4013 cvss-medium release-48x security sxss xss

Marek Parfianowicz made changes - 09/Nov/2023 9:43 AM

Labels

Original: advisory advisory-released bugbounty cve-2020-4013 cvss-medium release-490 security sxss xss

New: advisory advisory-released bugbounty cve-2020-4013 cvss-medium release-48x release-490 security sxss xss

Marek Parfianowicz made changes - 09/May/2023 5:48 PM

Labels

Original: advisory advisory-released bugbounty cve-2020-4013 cvss-medium security sxss xss

New: advisory advisory-released bugbounty cve-2020-4013 cvss-medium release-490 security sxss xss

Marek Parfianowicz made changes - 16/Mar/2021 11:17 AM

Fix Version/s

Original: 4.9.0 [ 90694 ]

AB made changes - 05/Aug/2020 3:29 AM

Fix Version/s

New: 4.8.3 [ 91929 ]

Erin Jensby made changes - 22/Apr/2020 3:19 PM

Labels

Original: advisory advisory-to-release bugbounty cve-2020-4013 cvss-medium security sxss xss

New: advisory advisory-released bugbounty cve-2020-4013 cvss-medium security sxss xss

Erin Jensby made changes - 16/Apr/2020 6:41 PM

Resolution		New: Fixed [ 1 ]
Status	Original: Needs Triage [ 10030 ]	New: Closed [ 6 ]

Erin Jensby made changes - 16/Apr/2020 6:40 PM

Labels

Original: advisory advisory-to-release bugbounty cvss-medium security sxss xss

New: advisory advisory-to-release bugbounty cve-2020-4013 cvss-medium security sxss xss

Erin Jensby made changes - 16/Apr/2020 6:40 PM

Summary

Original: XSS in Code reviews - CVE-PENDING

New: XSS in the review resource through objectives - CVE-2020-4013

Erin Jensby made changes - 16/Apr/2020 6:38 PM

Description

Original: Component in Atlassian Fisheye Crucible Development from version 4.8.0 before version 4.8.1 and before version 4.9.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in VULN_INFO.

New: The review resource in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to inject arbitrary HTML or Javascript via a cross site scripting (XSS) vulnerability through the review objectives.

Load more older events