Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qr52-gfv9-hv5x

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The review coverage resource in Atlassian Fisheye and Crucible before version 4.8.2 allows remote attackers to inject arbitrary HTML or Javascript via a cross site scripting (XSS) vulnerability through the committerFilter parameter.

The review coverage resource in Atlassian Fisheye and Crucible before version 4.8.2 allows remote attackers to inject arbitrary HTML or Javascript via a cross site scripting (XSS) vulnerability through the committerFilter parameter.

EPSS

Процентиль: 56%
0.00342
Низкий

Связанные уязвимости

CVSS3: 5.4
nvd
больше 5 лет назад

The review coverage resource in Atlassian Fisheye and Crucible before version 4.8.2 allows remote attackers to inject arbitrary HTML or Javascript via a cross site scripting (XSS) vulnerability through the committerFilter parameter.

EPSS

Процентиль: 56%
0.00342
Низкий