Security Advisory
CVE-2021-43954
4.3
MEDIUM
Vulnerability Description
The DefaultRepositoryAdminService class in Fisheye and Crucible before version 4.8.9 allowed remote attackers, who have 'can add repository permission', to enumerate the existence of internal network and filesystem resources via a Server-Side Request Forgery (SSRF) vulnerability.
Published Date
March 14, 2022
Official Source
NIST NVD Advisory