atlassian crucible CVE-2017-9507 is a vulnerability in Atlassian Crucible
Published on August 24, 2017

The review dashboard resource in Atlassian Crucible from version 4.1.0 before version 4.4.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the review filter title parameter.

NVD


Products Associated with CVE-2017-9507

Want to know whenever a new CVE is published for Atlassian Crucible? stack.watch will email you.

 

Affected Versions

Atlassian Crucible Version From version 4.1.0 before version 4.4.1. is affected by CVE-2017-9507

Exploit Probability

EPSS
0.26%
Percentile
48.71%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.