CVE-2021-43956

CVE-2021-43956: vulnerability in Atlassian Fisheye

Published · Updated

Follow this CVE+ Monitor Crucible+ Monitor Fisheye

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.7%
The jQuery deserialize library in Fisheye and Crucible before version 4.8.9 allowed remote attackers to to inject arbitrary HTML and/or JavaScript via a prototype pollution vulnerability.
Affected products
Atlassian · CrucibleAtlassian · Fisheye
Related CVEs — Atlassian Fisheye

In the same product, most dangerous first.

CVE-2022-26136CRITICALCVE-2022-26136EPSS 5.7%CVE-2022-26137HIGHCVE-2022-26137EPSS 2.4%CVE-2021-43958CRITICALCVE-2021-43958EPSS 1.5%CVE-2019-15005—CVE-2019-15005EPSS 1.3%CVE-2021-43957HIGHCVE-2021-43957EPSS 1.3%CVE-2020-4017—CVE-2020-4017EPSS 1.2%