| Package | Affected versions | Patched versions |
|---|---|---|
| crucible | < 4.8.9 | 4.8.9 |
| fisheye | < 4.8.9 | 4.8.9 |
The /rest-service-fecru/server-v1 resource in Fisheye and Crucible before version 4.8.9 allowed authenticated remote attackers to obtain information about installation directories via information disclosure vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free