CVE-2017-14591: Critical severity atlassian crucible vulnerability
Atlassian Fisheye and Crucible versions less than 4.4.3 and version 4.5.0 are vulnerable to argument injection through filenames in Mercurial repositories, allowing attackers to execute arbitrary code on a system running the impacted software.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-14591 vulnerability?
CVE-2017-14591 is a vulnerability in Atlassian Fisheye and Crucible versions less than 4.4.3 and version 4.5.0 that allows attackers to execute arbitrary code on a system by injecting arguments through filenames in Mercurial repositories.
How does CVE-2017-14591 affect Atlassian Fisheye and Crucible?
CVE-2017-14591 affects Atlassian Fisheye and Crucible versions less than 4.4.3 and version 4.5.0.
What is the severity of CVE-2017-14591?
CVE-2017-14591 has a severity level of critical with a severity value of 9.
How can an attacker exploit CVE-2017-14591?
An attacker can exploit CVE-2017-14591 by manipulating filenames in Mercurial repositories to inject malicious arguments and execute arbitrary code.
How can I fix CVE-2017-14591 vulnerability?
To fix CVE-2017-14591, it is recommended to upgrade Atlassian Fisheye and Crucible to a version equal to or higher than 4.4.3, or version 4.5.0.