CVE-2020-29446
18.01.2021, 02:15
Affected versions of Atlassian Fisheye & Crucible allow remote attackers to browse local files via an Insecure Direct Object References (IDOR) vulnerability in the WEB-INF directory. The affected versions are before version 4.8.5.Enginsight
| Vendor | Product | Version |
|---|---|---|
| atlassian | crucible | 𝑥 < 4.8.5 |
| atlassian | fisheye | 𝑥 < 4.8.5 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration