Security Advisory

CVE-2021-43956

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-03-16 00:55:16
Last updated 2024-10-03 14:32:50
Assigner atlassian
State PUBLISHED

Description

The jQuery deserialize library in Fisheye and Crucible before version 4.8.9 allowed remote attackers to to inject arbitrary HTML and/or JavaScript via a prototype pollution vulnerability.