CyberRota Analysis
AI analysis pending.
CVE
CVE-2017-9509
Severity
MEDIUM
CVSS
5.4
EPSS
0.82%
Java
Original NVD Description
The review file upload resource in Atlassian Crucible before version 4.4.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the charset of a previously uploaded file.