CVE-2018-5228: XSS
The /browse/~raw resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the handling of response headers.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-5228?
CVE-2018-5228 is a cross site scripting (XSS) vulnerability in Atlassian Fisheye and Crucible before version 4.5.3.
How does CVE-2018-5228 affect Atlassian FishEye?
CVE-2018-5228 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the handling of response headers.
What is the severity of CVE-2018-5228?
CVE-2018-5228 has a severity rating of 6.1 out of 10 (medium).
How can I fix CVE-2018-5228 in Atlassian FishEye and Crucible?
To fix CVE-2018-5228, you should upgrade Atlassian FishEye and Crucible to version 4.5.3 or higher.
Where can I find more information about CVE-2018-5228?
You can find more information about CVE-2018-5228 at the following references: [link1], [link2], [link3].