CVE-2017-14587

Description

The administration user deletion resource in Atlassian Fisheye and Crucible before version 4.4.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the uname parameter.

References

https://jira.atlassian.com/browse/FE-6933

https://jira.atlassian.com/browse/CRUC-8112

http://www.securityfocus.com/bid/101266

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS