← CVE Intelligence

CVE-2017-9509

Atlassian / Atlassian Crucible PUBLISHED

Description (CNA)

The review file upload resource in Atlassian Crucible before version 4.4.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the charset of a previously uploaded file.

Affected (CNA)

Vendor / productVersions
Atlassian / Atlassian Crucibleaffected All versions prior to version 4.4.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.