CVE-2017-14591

2017-11-2900:00:00

atlassian

www.cve.org

9.5 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.4%

JSON

Atlassian Fisheye and Crucible versions less than 4.4.3 and version 4.5.0 are vulnerable to argument injection through filenames in Mercurial repositories, allowing attackers to execute arbitrary code on a system running the impacted software.

CNA Affected

[
  {
    "product": "Fisheye and Crucible",
    "vendor": "Atlassian",
    "versions": [
      {
        "status": "affected",
        "version": "Versions less than 4.4.3 OR version 4.5.0"
      }
    ]
  }
]

References

www.securityfocus.com/bid/102194

confluence.atlassian.com/x/plcGO