Vulnerability Bulletins

CVE-2020-29446

   
Affected software ATLASSIAN
 
Affected versions of Atlassian Fisheye & Crucible allow remote attackers to browse local files via an Insecure Direct Object References (IDOR) vulnerability in the WEB-INF directory. The affected versions are before version 4.8.5.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2020-29446