CVE-2017-16859: vulnerability in Atlassian Fisheye and Crucible
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 2.4%
The review attachment resource in Atlassian Fisheye and Crucible before version 4.3.2, from version 4.4.0 before 4.4.3 and before version 4.5.0 allows remote attackers to read files contained within context path of the running application through a path traversal vulnerability in the command parameter.
Affected products
Atlassian · Fisheye and CrucibleRelated CVEs — Atlassian Fisheye and Crucible
In the same product, most dangerous first.