CWE Code: 79
Vulnerability Type: privilege_escalation
CVSS Score: 3.5
CWE Name:  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Summary: various resources in atlassian fisheye and crucible before version 4.4.3 (the fixed version for 4.4.x) and 4.5.0 allow remote attackers with administrative privileges to inject arbitrary html or javascript via a cross site scripting (xss) vulnerability through the base path setting of a configured file system repository.
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2018-03-22
Last Modified Date: 2018-04-18