Unrated severityNVD Advisory· Published Mar 14, 2022· Updated Oct 4, 2024
CVE-2021-43954
CVE-2021-43954
Description
The DefaultRepositoryAdminService class in Fisheye and Crucible before version 4.8.9 allowed remote attackers, who have 'can add repository permission', to enumerate the existence of internal network and filesystem resources via a Server-Side Request Forgery (SSRF) vulnerability.
Affected products
2Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- jira.atlassian.com/browse/CRUC-8520mitrex_refsource_MISC
- jira.atlassian.com/browse/FE-7384mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.