Security Advisory
CVE-2021-43956
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The jQuery deserialize library in Fisheye and Crucible before version 4.8.9 allowed remote attackers to to inject arbitrary HTML and/or JavaScript via a prototype pollution vulnerability.