Skip to content
OpenAdvisories
Unscored CVE-2020-4018 EUVD-2020-25283GHSA-p24q-jv27-xq4x

The setup resources in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to complete the setup process via a cros…

Published Jun 1, 2020 · Updated Sep 16, 2024 · Assigned by atlassian

Vendor: Atlassian Product: Crucible Product: Fisheye

Description

The setup resources in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to complete the setup process via a cross-site request forgery (CSRF) vulnerability.

Affected products

VendorProductAffectedFixed
Atlassian Crucible unspecified – < 4.8.1 4.8.1
Atlassian Fisheye unspecified – < 4.8.1 4.8.1

References