Miembros de
Boletines de Vulnerabilidades |
CVE-2021-43957 |
|
| Software afectado | ATLASSIAN |
| Affected versions of Atlassian Fisheye & Crucible allowed remote attackers to browse local files via an Insecure Direct Object References (IDOR) vulnerability in the WEB-INF directory and bypass the fix for CVE-2020-29446 due to a lack of url decoding. The affected versions are before version 4.8.9. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2021-43957 | |
