Atlassian Crucible 漏洞

时间轴

版本

4.024
4.124
4.224
4.324
4.424

修正

Official Fix46
Temporary Fix0
Workaround0
Unavailable0
Not Defined0

易受攻击性

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined46

访问向量

Not Defined0
Physical0
Local0
Adjacent0
Network46

身份验证

Not Defined0
High8
Low22
None16

用户交互

Not Defined0
Required6
None40

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤48
≤516
≤614
≤76
≤82
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤48
≤518
≤614
≤74
≤82
≤90
≤100

VulDB

≤10
≤20
≤38
≤44
≤514
≤610
≤76
≤84
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤516
≤614
≤76
≤84
≤92
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k12
<2k18
<5k16
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k46
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Versions (26): 4.0, 4.1, 4.2, 4.3, 4.3.1, 4.4, 4.4.1, 4.4.2, 4.5, 4.5.1, 4.5.2, 4.5.3, 4.6, 4.7, 4.7.1, 4.7.2, 4.7.3, 4.8, 4.8.1, 4.8.2, 4.8.3, 4.8.4, 4.8.5, 4.8.6, 4.8.7, 4.8.8

Link to Product Website: https://www.atlassian.com/

软件类型: Bug Tracking Software

已发布BaseTemp漏洞0day今天易修正CTICVE
2022-07-217.57.4Atlassian Jira Servlet Filter 未知漏洞$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2022-26136
2022-07-218.07.9Atlassian Jira HTTP Request Remote Code Execution$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2022-26137
2022-03-166.36.0Atlassian FishEye/Crucible 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2021-43957
2022-03-166.36.0Atlassian FishEye/Crucible jQuery Deserialize 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-43956
2022-03-163.73.6Atlassian FishEye/Crucible REST 信息公开$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2021-43958
2022-03-165.35.1Atlassian FishEye/Crucible server-v1 信息公开$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-43955
2022-03-144.34.1Atlassian FishEye/Crucible DefaultRepositoryAdminService 权限升级$0-$5k计算Not DefinedOfficial Fix0.00CVE-2021-43954
2021-01-184.84.6Atlassian FishEye/Crucible 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-29446
2020-12-214.34.3Atlassian Crucible File Upload 拒绝服务$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2020-29447
2020-11-265.95.6Atlassian Fisheye/Crucible MessageBundleResource 拒绝服务$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2020-14191

35 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 35 results.

更多条目由 Atlassian

◂ 上一步一览下一步 ▸

Do you know our Splunk app?

Download it now for free!