Skip to content
OpenAdvisories
Unscored CVE-2020-4015 EUVD-2020-25280GHSA-p25g-fphh-8cw3

The /json/fe/activeUserFinder.do resource in Altassian Fisheye and Crucible before version 4.8.1 allows remote attackers to view user user …

Published Jun 1, 2020 · Updated Sep 16, 2024 · Assigned by atlassian

Vendor: Atlassian Product: Crucible Product: Fisheye

Description

The /json/fe/activeUserFinder.do resource in Altassian Fisheye and Crucible before version 4.8.1 allows remote attackers to view user user email addresses via a information disclosure vulnerability.

Affected products

VendorProductAffectedFixed
Atlassian Crucible unspecified – < 4.8.1 4.8.1
Atlassian Fisheye unspecified – < 4.8.1 4.8.1

References