Skip to content
OpenAdvisories
Unscored CVE-2017-14588 EUVD-2017-6089GHSA-frqp-667v-9r36

Various resources in Atlassian Fisheye and Crucible before version 4.4.2 allow remote attackers to inject arbitrary HTML or JavaScript via …

Published Oct 11, 2017 · Updated Oct 15, 2024 · Assigned by atlassian

Vendor: Atlassian Product: Atlassian Fisheye and Crucible

Description

Various resources in Atlassian Fisheye and Crucible before version 4.4.2 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the dialog parameter.

Affected products

VendorProductAffectedFixed
Atlassian Atlassian Fisheye and Crucible All versions prior to version 4.4.2 —

References