CVE-2021-43957
16.03.2022, 01:15
Affected versions of Atlassian Fisheye & Crucible allowed remote attackers to browse local files via an Insecure Direct Object References (IDOR) vulnerability in the WEB-INF directory and bypass the fix for CVE-2020-29446 due to a lack of url decoding. The affected versions are before version 4.8.9.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| atlassian | crucible | 𝑥 < 4.8.9 |
| atlassian | fisheye | 𝑥 < 4.8.9 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| atlassian | fisheye | 𝑥 < 4.8.9 | ADP |
| atlassian | crucible | 𝑥 < 4.8.9 | ADP |
Common Weakness Enumeration