Skip to content
OpenAdvisories
Unscored CVE-2017-9507 EUVD-2017-18439GHSA-8gv2-v57r-f43p

The review dashboard resource in Atlassian Crucible from version 4.1.0 before version 4.4.1 allows remote attackers to inject arbitrary HTM…

Published Aug 24, 2017 · Updated Oct 15, 2024 · Assigned by atlassian

Vendor: Atlassian Product: Atlassian Crucible

Description

The review dashboard resource in Atlassian Crucible from version 4.1.0 before version 4.4.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the review filter title parameter.

Affected products

VendorProductAffectedFixed
Atlassian Atlassian Crucible From version 4.1.0 before version 4.4.1. —

References