| Package | Affected versions | Patched versions |
|---|---|---|
| crucible | ≤ 4.4.0 | |
| fisheye | ≤ 4.4.0 |
The MultiPathResource class in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote attackers to read arbitrary files via a path traversal vulnerability when Fisheye or Crucible is running on the Microsoft Windows operating system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free