CVE-2017-18090

published 2018-02-16

CVE-2017-18090: Various resources in Atlassian Fisheye before version 4.5.1 (the fixed version for 4.5.x) and before version 4.6.0 allow remote attackers to inject arbitrary…

medium 6.1 CVSS 3.0

AV N AC L PR N UI R S C C L I L A N

Various resources in Atlassian Fisheye before version 4.5.1 (the fixed version for 4.5.x) and before version 4.6.0 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of a commit author.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
atlassian	fisheye	—	—
atlassian	fisheye	—	—
atlassian	fisheye	—	—

CWE-79