CVE-2017-14591

State: Published
Severity: Not scored
Published: Nov 29, 2017
Updated: Sep 16, 2024
Reserved: Sep 19, 2017

Description

Atlassian Fisheye and Crucible versions less than 4.4.3 and version 4.5.0 are vulnerable to argument injection through filenames in Mercurial repositories, allowing attackers to execute arbitrary code on a system running the impacted software.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Fisheye and CrucibleAtlassian	Versions less than 4.4.3 OR version 4.5.0Affected

References

https://confluence.atlassian.com/x/plcGO
102194vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.