← Database

CVE-2021-43956

MEDIUM CVSS: 6.1 Published: 2022-03-16 Modified: 2026-06-17

Description

The jQuery deserialize library in Fisheye and Crucible before version 4.8.9 allowed remote attackers to to inject arbitrary HTML and/or JavaScript via a prototype pollution vulnerability.

Affected Platforms

Atlassian CrucibleAtlassian Fisheye

Weakness Type

CWE-1321

References