The /browse/~raw resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the handling of response headers.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: atlassian

Published: 2018-04-24T12:00:00Z

Updated: 2024-09-17T00:51:54.409Z

Reserved: 2018-01-05T00:00:00

Link: CVE-2018-5228

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2018-04-24T12:29:00.473

Modified: 2018-06-06T12:56:21.510

Link: CVE-2018-5228

cve-icon Redhat

No data.