Medium WID-SEC-2025-1108 1 CVE

Atlassian Crucible: Schwachstelle ermöglicht Denial of Service

Published May 20, 2025 · Updated May 20, 2025 · de-DE

Vendor: Atlassian Product: Crucible Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Atlassian Crucible ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Crucible ist eine Code-Review-Lösung für Unternehmensteams.

Vulnerabilities 1

High 7.5

CVE-2024-57699

Netplex Json-smart Uncontrolled Recursion vulnerability

A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input, containing a large number of ’{’, a stack exhaustion can be trigger, which could allow an attacker to cause a Denial of Service (DoS). This issu…

trino trino-plugin-opensearch trino-plugin-lakehouse trino-plugin-pinot Debian Ubuntu Wolfi Maven

Feb 5, 2025

Revision history

2025-05-20 #1
Initiale Fassung

References

Atlassian Security Advisory vom 2025-05-20
https://jira.atlassian.com/browse/CRUC-8661