Security Advisory
CVE-2018-13388
5.4
MEDIUM
Vulnerability Description
The review attachment resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in attached files.
Published Date
July 10, 2018
Official Source
NIST NVD Advisory