{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-03T11:19:03.044","vulnerabilities":[{"cve":{"id":"CVE-2017-18034","sourceIdentifier":"security@atlassian.com","published":"2018-02-02T14:29:00.543","lastModified":"2024-11-21T03:19:13.000","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The source browse resource in Atlassian Fisheye and Crucible before version 4.5.1 and 4.6.0 allows allows remote attackers that have write access to an indexed repository to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in via a specially crafted repository branch name when trying to display deleted files of the branch."},{"lang":"es","value":"El recurso de exploración de fuentes en Atlassian Fisheye y Crucible en versiones anterores 4.5.1 y 4.6.0 permite a los atacantes remotos que tienen acceso de escritura a un repositorio indexado inyectar HTML o JavaScript arbitrario a través de una vulnerabilidad de scripts de sitios cruzados (XSS) a través de un nombre de rama del repositorio especialmente elaborado cuando se intenta mostrar los archivos eliminados de la rama"}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:*","versionEndExcluding":"4.5.1","matchCriteriaId":"CC7AF5E6-136F-4DED-823F-602C6863265B"},{"vulnerable":true,"criteria":"cpe:2.3:a:atlassian:crucible:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"1F48646D-1774-4036-8BBF-3BAA34EF4787"},{"vulnerable":true,"criteria":"cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:*","versionEndExcluding":"4.5.1","matchCriteriaId":"557AE134-DC5B-4546-8DF4-1E89BB32558E"},{"vulnerable":true,"criteria":"cpe:2.3:a:atlassian:fisheye:4.6.0:*:*:*:*:*:*:*","matchCriteriaId":"5342E75B-39DD-45F5-B794-CB63D7E8894A"}]}]}],"references":[{"url":"https://jira.atlassian.com/browse/CRUC-8161","source":"security@atlassian.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://jira.atlassian.com/browse/FE-6994","source":"security@atlassian.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://jira.atlassian.com/browse/CRUC-8161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://jira.atlassian.com/browse/FE-6994","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]}]}}]}