← CVE Intelligence

CVE-2021-43954

Atlassian / Fisheye PUBLISHED

Description (CNA)

The DefaultRepositoryAdminService class in Fisheye and Crucible before version 4.8.9 allowed remote attackers, who have 'can add repository permission', to enumerate the existence of internal network and filesystem resources via a Server-Side Request Forgery (SSRF) vulnerability.

Affected (CNA)

Vendor / productVersions
Atlassian / Fisheyeaffected unspecified before 4.8.9
Atlassian / Crucibleaffected unspecified before 4.8.9

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.