CVE-2021-43954

No fix known EPSS <1%

The DefaultRepositoryAdminService class in Fisheye and Crucible before version 4.8.9 allowed remote attackers, who have 'can add repository permission', to enumerate the existence of internal network and filesystem resources via a Server-Side Request Forgery (SSRF) vulnerability.

Published 2022-03-14 · CVE record · OSV

Products: Atlassian Fisheye, Atlassian Crucible