Fisheye And Crucible
Approved changes feed: RSS · Atom
cpe:2.3:a:atlassian:fisheye_and_crucible:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Atlassian (8acde0d4-2b83-5bd8-8d3f-60d59e0b022e) |
|---|---|
| Product | Fisheye And Crucible (57d71832-bf0a-5d71-9937-cb50cd64324c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-5228 |
vulnerable | 2026-06-08 05:11:50.467656 |
Details available
The /browse/~raw resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the handling of response headers.
Published: 2018-04-24T12:00:00.000Z
Updated: 2024-09-17T00:51:54.409Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5223 |
vulnerable | 2026-06-08 05:11:50.456413 |
Details available
Fisheye and Crucible did not correctly check if a configured Mercurial repository URI contained values that the Windows operating system may consider argument parameters. An attacker who has permission to add a repository in Fisheye or Crucible can execute code of their choice on systems that run a vulnerable version of Fisheye or Crucible on the Windows operating system. All versions of Fisheye and Crucible before 4.4.6 (the fixed version for 4.4.x) and from 4.5.0 before 4.5.3 (the fixed version for 4.5.x) are affected by this vulnerability.
Published: 2018-03-29T13:00:00.000Z
Updated: 2024-09-16T19:56:55.062Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20241 |
vulnerable | 2026-06-08 05:11:26.889502 |
Details available
The Edit upload resource for a review in Atlassian Fisheye and Crucible before version 4.7.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the wbuser parameter.
Published: 2019-02-20T15:00:00.000Z
Updated: 2024-09-17T00:31:10.796Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20240 |
vulnerable | 2026-06-08 05:11:26.888940 |
Details available
The administrative linker functionality in Atlassian Fisheye and Crucible before version 4.7.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the href parameter.
Published: 2019-02-20T15:00:00.000Z
Updated: 2024-09-17T00:15:39.095Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13399 |
vulnerable | 2026-06-08 05:10:51.244940 |
Details available
The Microsoft Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows local attackers to escalate privileges because of weak permissions on the installation directory.
Published: 2018-10-16T13:00:00.000Z
Updated: 2024-09-16T20:21:40.541Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13398 |
vulnerable | 2026-06-08 05:10:51.244619 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13392 |
vulnerable | 2026-06-08 05:10:51.240101 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13388 |
vulnerable | 2026-06-08 05:10:51.232252 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-18094 |
vulnerable | 2026-06-08 05:09:10.338361 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-18093 |
vulnerable | 2026-06-08 05:09:10.337994 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-18091 |
vulnerable | 2026-06-08 05:09:10.337195 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-18035 |
vulnerable | 2026-06-08 05:09:10.236532 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-18034 |
vulnerable | 2026-06-08 05:09:10.233902 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16861 |
vulnerable | 2026-06-08 05:09:01.148773 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16859 |
vulnerable | 2026-06-08 05:09:01.146411 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-14591 |
vulnerable | 2026-06-08 05:08:50.138586 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.