Atlassian: >> Crucible >> 4.8.2 Security Vulnerabilities
Affected versions of Atlassian Crucible allow remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability in the file upload request feature of code reviews. The affected versions are before version 4.7.4, and from version 4.8.0 before 4.8.5.
CVSS Score
4.3
EPSS Score
0.004
Published
2020-12-21
Affected versions of Atlassian Fisheye/Crucible allow remote attackers to achieve Regex Denial of Service via user-supplied regex in EyeQL. The affected versions are before version 4.8.4.
CVSS Score
7.5
EPSS Score
0.007
Published
2020-11-25
Affected versions of Atlassian Fisheye/Crucible allow remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability in the MessageBundleResource within Atlassian Gadgets. The affected versions are before version 4.8.4.
CVSS Score
7.5
EPSS Score
0.007
Published
2020-11-25
Page 2