Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-43957
HistoryMar 16, 2022 - 1:15 a.m.

Directory traversal

2022-03-1601:15:00
PRIOn knowledge base
www.prio-n.com
3

6.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.8%

Affected versions of Atlassian Fisheye & Crucible allowed remote attackers to browse local files via an Insecure Direct Object References (IDOR) vulnerability in the WEB-INF directory and bypass the fix for CVE-2020-29446 due to a lack of url decoding. The affected versions are before version 4.8.9.

CPENameOperatorVersion
cruciblelt4.8.9
fisheyelt4.8.9

6.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.8%

Related for PRION:CVE-2021-43957