CVE-2017-9510: XSS
Published Aug 24, 2017
·Updated
The repository changelog resource in Atlassian Fisheye before version 4.4.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the start date and end date parameters.
Affected Software
1 affected component
Atlassian FishEye<=4.4.0
Event History
Aug 24, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-9510?
CVE-2017-9510 has a medium severity rating due to its potential for cross site scripting exploitation.
2
How do I fix CVE-2017-9510?
To fix CVE-2017-9510, upgrade Atlassian Fisheye to version 4.4.1 or later.
3
What are the potential impacts of exploiting CVE-2017-9510?
Exploiting CVE-2017-9510 may allow attackers to execute arbitrary HTML or JavaScript in the context of the affected user, leading to data theft or manipulation.
4
Is CVE-2017-9510 still a threat if the software is updated?
No, CVE-2017-9510 is no longer a threat if the software has been updated to version 4.4.1 or later.
5
What versions of Atlassian Fisheye are affected by CVE-2017-9510?
CVE-2017-9510 affects Atlassian Fisheye versions prior to 4.4.1.