CVE-2020-29447 in Crucible

Summary

by MITRE • 12/21/2020

Affected versions of Atlassian Crucible allow remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability in the file upload request feature of code reviews. The affected versions are before version 4.7.4, and from version 4.8.0 before 4.8.5.

Once again VulDB remains the best source for vulnerability data.

• Disclosure: 12/21/2020
• Moderation: accepted
• Entry: VDB-166624
• CPE: ready
• CWE: CWE-404 (confirmed)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00991
• KEV: no
• Activities: very low
• Sector: Hostingprovider, Telecommunication

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-29447
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-29447
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-29447/