CVE-2020-4017

Summary

The /rest/jira-ril/1.0/jira-rest/applinks resource in the crucible-jira-ril plugin in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to get information about any configured Jira application links via an information disclosure vulnerability.

Affected Software

VendorProductVersion RangeStatus
AtlassianCrucibleunspecified < 4.8.1affected
AtlassianFisheyeunspecified < 4.8.1affected

Weaknesses

  • Information Disclosure

ADP Enrichment

CVE Program Container

Additional References

References