CVE-2021-43954

CVE-2021-43954: vulnerability in Atlassian Fisheye

Published · Updated

Follow this CVE+ Monitor Crucible+ Monitor Fisheye

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.8%
The DefaultRepositoryAdminService class in Fisheye and Crucible before version 4.8.9 allowed remote attackers, who have 'can add repository permission', to enumerate the existence of internal network and filesystem resources via a Server-Side Request Forgery (SSRF) vulnerability.
Affected products
Atlassian · CrucibleAtlassian · Fisheye
Related CVEs — Atlassian Fisheye

In the same product, most dangerous first.

CVE-2022-26136CRITICALCVE-2022-26136EPSS 5.7%CVE-2022-26137HIGHCVE-2022-26137EPSS 2.4%CVE-2021-43958CRITICALCVE-2021-43958EPSS 1.5%CVE-2019-15005—CVE-2019-15005EPSS 1.3%CVE-2021-43957HIGHCVE-2021-43957EPSS 1.3%CVE-2020-4017—CVE-2020-4017EPSS 1.2%