CVE-2017-9509

CVE-2017-9509: vulnerability in Atlassian Crucible

Published · Updated

Follow this CVE+ Monitor Crucible

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.8%
The review file upload resource in Atlassian Crucible before version 4.4.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the charset of a previously uploaded file.
Affected products
Atlassian · Atlassian Crucible
Related CVEs — Atlassian Crucible

In the same product, most dangerous first.

CVE-2017-9507—CVE-2017-9507EPSS 0.8%