Medium severity6.5NVD Advisory· Published Jun 28, 2018· Updated Jun 17, 2026
CVE-2017-16859
CVE-2017-16859
Description
The review attachment resource in Atlassian Fisheye and Crucible before version 4.3.2, from version 4.4.0 before 4.4.3 and before version 4.5.0 allows remote attackers to read files contained within context path of the running application through a path traversal vulnerability in the command parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4<4.3.2, 4.4.0 to <4.4.3, <4.5.0+ 1 more
- (no CPE)range: <4.3.2, 4.4.0 to <4.4.3, <4.5.0
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
3- www.securityfocus.com/bid/104578nvdThird Party AdvisoryVDB Entry
- jira.atlassian.com/browse/CRUC-8212nvdIssue TrackingThird Party Advisory
- jira.atlassian.com/browse/FE-7061nvdIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.