548 matches found
CVE-2020-29446
Affected versions of Atlassian Fisheye & Crucible allow remote attackers to browse local files via an Insecure Direct Object References IDOR vulnerability in the WEB-INF directory. The affected versions are before version 4.8.5...
Spoofing
Affected versions of Atlassian Fisheye & Crucible allow remote attackers to browse local files via an Insecure Direct Object References IDOR vulnerability in the WEB-INF directory. The affected versions are before version 4.8.5...
CVE-2020-29446
CVE-2020-29446 is an IDOR vulnerability in Atlassian Fisheye & Crucible that allowed remote attackers to browse local files via the WEB-INF directory. Affected versions were before 4.8.5. Later CVE-2021-43957 documents bypasses of the fix for CVE-2020-29446 due to insufficient URL decoding, with ...
CVE-2020-29446
Affected versions of Atlassian Fisheye & Crucible allow remote attackers to browse local files via an Insecure Direct Object References IDOR vulnerability in the WEB-INF directory. The affected versions are before version 4.8.5...
Vulnerability fixed in Atlassian Crucible
A vulnerability has been fixed in Atlassian Crucible. The vulnerability allows a malicious party to obtain system data obtain. Atlassian has released updates to fix the vulnerability. fix. More information can be found on the page below: https://jira.atlassian.com/browse/CRUC-8496...
PT-2021-7921 · Atlassian · Fisheye/Crucible
Name of the Vulnerable Software and Affected Versions: Atlassian Fisheye & Crucible versions prior to 4.8.5 Description: The issue is related to an Insecure Direct Object References IDOR vulnerability in the WEB-INF directory, allowing remote attackers to browse local files. This can lead to...
Atlassian Fisheye and Crucible Information Disclosure Vulnerabilities
Atlassian Fisheye and Crucible are both products of Atlassian Australia.Atlassian Fisheye is a deep source code viewer.Crucible is a code review tool. A security vulnerability exists in Atlassian Fisheye and Atlassian Crucible, which can be exploited by an attacker to browse local files via an...
CVE-2020-29447
Affected versions of Atlassian Crucible allow remote attackers to impact the application's availability via a Denial of Service DoS vulnerability in the file upload request feature of code reviews. The affected versions are before version 4.7.4, and from version 4.8.0 before 4.8.5...
CVE-2020-29447
Affected versions of Atlassian Crucible allow remote attackers to impact the application's availability via a Denial of Service DoS vulnerability in the file upload request feature of code reviews. The affected versions are before version 4.7.4, and from version 4.8.0 before 4.8.5...
Design/Logic Flaw
Affected versions of Atlassian Crucible allow remote attackers to impact the application's availability via a Denial of Service DoS vulnerability in the file upload request feature of code reviews. The affected versions are before version 4.7.4, and from version 4.8.0 before 4.8.5...
CVE-2020-29447
CVE-2020-29447 affects Atlassian Crucible. The vulnerability is a Denial of Service (DoS) in the file upload feature during code reviews, allowing remote attackers to impact availability. Affected versions are before 4.7.4, and 4.8.0 up to but not including 4.8.5. Fixed versions are 4.7.4, 4.8.5,...
CVE-2020-29447
Affected versions of Atlassian Crucible allow remote attackers to impact the application's availability via a Denial of Service DoS vulnerability in the file upload request feature of code reviews. The affected versions are before version 4.7.4, and from version 4.8.0 before 4.8.5...
Vulnerability fixed in Atlassian Crucible
A vulnerability has been fixed in Atlassian Crucible. The vulnerability allows a malicious party to perform a denial-of-service attack. Atlassian has released updates to fix the vulnerability. fix. More information can be found on the page below: https://jira.atlassian.com/browse...
Atlassian Crucible Code Issue Vulnerability
Atlassian Crucible is a suite of code review tools from Atlassian Australia. A code issue vulnerability exists in Atlassian Crucible versions prior to 4.7.4, 4.8.0 through 4.8.5, which allows remote attackers to exploit a Denial of Service DoS vulnerability in the File Upload Request feature of...
Sending multiple concurrent file upload requests will permanently break a review - CVE-2020-29447
Affected versions of Atlassian Crucible allow remote attackers to impact the application's availability via a Denial of Service DoS vulnerability in the file upload request feature of code reviews. The affected versions are before version 4.7.4, and from version 4.8.0 before 4.8.5. Affected...
Sending multiple concurrent file upload requests will permanently break a review - CVE-2020-29447
Affected versions of Atlassian Crucible allow remote attackers to impact the application's availability via a Denial of Service DoS vulnerability in the file upload request feature of code reviews. The affected versions are before version 4.7.4, and from version 4.8.0 before 4.8.5. Affected...
Vulnerabilities fixed in Atlassian Crucible
Atlassian has fixed vulnerabilities in Crucible. The vulnerabilities allow a remote malicious person to perform a denial-of-service. Atlassian has released updates to fix the vulnerabilities. fixes. More information can be found on the pages below: CVE-2020-14190:...
Atlassian Fisheye Crucible Denial of Service Vulnerability
Atlassian Fisheye and Crucible are both products of the Australian company Atlassian, Atlassian Fisheye is a suite of in-depth viewers of source code and Crucible is a suite of code review tools. A denial of service vulnerability exists in Atlassian Fisheye/Crucible, which can be exploited by an...