description: The /browse/~raw resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the handling of response headers.
problem types: Cross Site Scripting (XSS)
affected:
{
product: Fisheye and Crucible
vendor: Atlassian
versions:
lessThan: 4.5.3, status: affected, version: unspecified, versionType: custom
}