CVE-2017-18092

—

CVSS 3.0

5.4 medium

EPSS

<1%p49

Published

Feb 19, 2018 (Feb 19, 2018)

Modified

Jun 17, 2026

Description

The print snippet resource in Atlassian Crucible before version 4.4.3 (the fixed version for 4.4.x) and before 4.5.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the contents of a comment on the snippet.

Vendors: atlassian
Products: crucible
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.