← CVE Intelligence

CVE-2018-5229

Atlassian / Universal Plugin Manager PUBLISHED

Description (CNA)

The NotificationRepresentationFactoryImpl class in Atlassian Universal Plugin Manager before version 2.22.9 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of user submitted add-on names.

Affected (CNA)

Vendor / productVersions
Atlassian / Universal Plugin Manageraffected unspecified before 2.22.9

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.