CR
Product
Crucible
On CISA KEVExploited in the wild
53
CVEs
1
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 5High 11Medium 37Low 0
Watch
Add Crucible to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-15009 | 4.3 | Dec 11 | The /json/profile/removeStarAjax.do resource in Atlassian Fisheye and Crucible before version 4.8.0 allows remote attackers to remove another user's favourite setting for a… Affected: before 4.8.0 |
| CVE-2019-15005 | 4.3 | Nov 8 | The Atlassian Troubleshooting and Support Tools plugin prior to version 1.17.2 allows an unprivileged user to initiate periodic log scans and send the results to a user-specified… Affected: before 4.7.2 |
| CVE-2017-18035 | 4.3 | Feb 2 | The /rest/review-coverage-chart/1.0/data/<repository_name>/.json resource in Atlassian Fisheye and Crucible before version 4.5.1 and 4.6.0 was missing a permissions check, this… Affected: before 4.5.1 |