CVE-2017-18091

CVE-2017-18091: vulnerability in Atlassian Fisheye and Crucible

Published · Updated

Follow this CVE+ Monitor Crucible+ Monitor Fisheye

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.8%
The admin backupprogress action in Atlassian Fisheye and Crucible before version 4.4.3 (the fixed version for 4.4.x) and before 4.5.0 allows remote attackers with administrative privileges to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the filename of a backup.
Affected products
Atlassian · Fisheye and Crucible
Related CVEs — Atlassian Fisheye and Crucible

In the same product, most dangerous first.

CVE-2017-16859—CVE-2017-16859EPSS 2.4%CVE-2017-14591—CVE-2017-14591EPSS 2.3%CVE-2018-5223—CVE-2018-5223EPSS 2.1%CVE-2017-16861—CVE-2017-16861EPSS 1.9%CVE-2018-13392—CVE-2018-13392EPSS 1.7%CVE-2018-5228—CVE-2018-5228EPSS 1.1%