| Package | Affected versions | Patched versions |
|---|---|---|
| crucible | < 4.8.1 | 4.8.1 |
| fisheye | < 4.8.1 | 4.8.1 |
The /plugins/servlet/jira-blockers/ resource in the crucible-jira-ril plugin in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to get the ID of configured Jira application links via an information disclosure vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free