CVE-2021-43956

No fix known EPSS <1%

The jQuery deserialize library in Fisheye and Crucible before version 4.8.9 allowed remote attackers to to inject arbitrary HTML and/or JavaScript via a prototype pollution vulnerability.

Published 2022-03-16 · CVE record · OSV

Products: Atlassian Fisheye, Atlassian Crucible