Skip to content
OpenAdvisories
Unscored CVE-2020-14190 EUVD-2020-6346GHSA-9246-2mcc-pf87

Affected versions of Atlassian Fisheye/Crucible allow remote attackers to achieve Regex Denial of Service via user-supplied regex in EyeQL.…

Published Nov 25, 2020 · Updated Sep 16, 2024 · Assigned by atlassian

Vendor: Atlassian Product: Crucible Product: Fisheye

Description

Affected versions of Atlassian Fisheye/Crucible allow remote attackers to achieve Regex Denial of Service via user-supplied regex in EyeQL. The affected versions are before version 4.8.4.

Affected products

VendorProductAffectedFixed
Atlassian Fisheye unspecified – < 4.8.4 4.8.4
Atlassian Crucible unspecified – < 4.8.4 4.8.4

References