NetSight
medium4.3

CVE-2021-43955

The /rest-service-fecru/server-v1 resource in Fisheye and Crucible before version 4.8.9 allowed authenticated remote attackers to obtain information about inst…

Impact

The /rest-service-fecru/server-v1 resource in Fisheye and Crucible before version 4.8.9 allowed authenticated remote attackers to obtain information about installation directories via information disclosure vulnerability.

Affected products

VendorProductAffected versions
AtlassianCrucible
before 4.8.9
AtlassianFisheye
before 4.8.9

References