CVE-2018-13388: XSS
The review attachment resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in attached files.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2018-13388?
CVE-2018-13388 is a vulnerability in Atlassian Fisheye and Crucible that allows remote attackers to inject arbitrary HTML or JavaScript via a cross-site scripting (XSS) vulnerability in attached files.
How does CVE-2018-13388 affect Atlassian Fisheye and Crucible?
CVE-2018-13388 affects Atlassian Fisheye and Crucible versions up to 4.5.3.
What is the severity of CVE-2018-13388?
The severity of CVE-2018-13388 is medium, with a CVSS score of 5.4.
How can an attacker exploit CVE-2018-13388?
An attacker can exploit CVE-2018-13388 by injecting arbitrary HTML or JavaScript through the review attachment resource in Atlassian Fisheye and Crucible.
Are there any references for CVE-2018-13388?
Yes, you can find references for CVE-2018-13388 at the following URLs: [http://www.securityfocus.com/bid/104717](http://www.securityfocus.com/bid/104717), [https://jira.atlassian.com/browse/CRUC-8209](https://jira.atlassian.com/browse/CRUC-8209), [https://jira.atlassian.com/browse/FE-7059](https://jira.atlassian.com/browse/FE-7059).