Description
Atlassian Fisheye and Crucible versions less than 4.4.3 and version 4.5.0 are vulnerable to argument injection through filenames in Mercurial repositories, allowing attackers to execute arbitrary code on a system running the impacted software.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Atlassian | Fisheye and Crucible | Versions less than 4.4.3 OR version 4.5.0 | — |