Path traversal

2017-08-2418:29:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.3%

JSON

The MultiPathResource class in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote attackers to read arbitrary files via a path traversal vulnerability when Fisheye or Crucible is running on the Microsoft Windows operating system.

CPENameOperatorVersion
cruciblele4.4.0
fisheyele4.4.0

CPE	Name	Operator	Version
	crucible	le	4.4.0
	fisheye	le	4.4.0

References

jira.atlassian.com/browse/CRUC-8049

jira.atlassian.com/browse/FE-6891