CVE-2017-14591

Description

Atlassian Fisheye and Crucible versions less than 4.4.3 and version 4.5.0 are vulnerable to argument injection through filenames in Mercurial repositories, allowing attackers to execute arbitrary code on a system running the impacted software.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-6092

https://confluence.atlassian.com/x/plcGO

http://www.securityfocus.com/bid/102194

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS