CVE-2020-4023

CVE-2020-4023: vulnerability in Atlassian Fisheye

Published · Updated

Follow this CVE+ Monitor Crucible+ Monitor Fisheye

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.8%
The review coverage resource in Atlassian Fisheye and Crucible before version 4.8.2 allows remote attackers to inject arbitrary HTML or Javascript via a cross site scripting (XSS) vulnerability through the committerFilter parameter.
Affected products
Atlassian · CrucibleAtlassian · Fisheye
Related CVEs — Atlassian Fisheye

In the same product, most dangerous first.

CVE-2022-26136CRITICALCVE-2022-26136EPSS 5.7%CVE-2022-26137HIGHCVE-2022-26137EPSS 2.4%CVE-2021-43958CRITICALCVE-2021-43958EPSS 1.5%CVE-2019-15005—CVE-2019-15005EPSS 1.3%CVE-2021-43957HIGHCVE-2021-43957EPSS 1.3%CVE-2020-4017—CVE-2020-4017EPSS 1.2%