CVE-2017-18092: The print snippet resource in Atlassian Crucible before version 4.4.3 (the fixed version for 4.4.x) and bef...

Security readout for executives and security teams

Atlassian Crucible versions before 4.4.3 on the 4.4 line and before 4.5.0 have an XSS flaw in the print snippet resource. A malicious snippet comment could cause browser-executed HTML or JavaScript when viewed, creating risk to users of the code review system. Exposure is limited to organizations running affected Atlassian Crucible versions, especially where untrusted or broad user groups can comment on snippets. Internet exposure would increase risk, but the sources do not state authentication requirements. Treat as a scheduled but real security fix for teams using Crucible. Prioritize faster if Crucible is internet-facing, broadly accessible, or used by external contributors. Mitigation focus: Upgrade Crucible 4.4.x to 4.4.3 or later.; Upgrade older Crucible releases to 4.5.0 or later.; Restrict Crucible access to trusted networks and users..

Prepared

Jun 7, 2026, 14:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.