• Type: Bug
• Resolution: Fixed
• Priority: Low
• Fix Version/s: 4.8.4
• Affects Version/s: 4.8.3
• Component/s: Search
• Labels:

  • CVE-2020-14190
  • advisory
  • advisory-to-release
  • cvss-medium
  • release-48x
  • security

[FE-7336] A user-supplied regex in EyeQL causes ReDoS - CVE-2020-14190

Marek Parfianowicz made changes - 09/Nov/2023 9:44 AM

Labels

Original: CVE-2020-14190 advisory advisory-to-release cvss-medium release-48x release-490 security

New: CVE-2020-14190 advisory advisory-to-release cvss-medium release-48x security

Marek Parfianowicz made changes - 09/Nov/2023 9:43 AM

Labels

Original: CVE-2020-14190 advisory advisory-to-release cvss-medium release-490 security

New: CVE-2020-14190 advisory advisory-to-release cvss-medium release-48x release-490 security

Marek Parfianowicz made changes - 09/May/2023 5:48 PM

Labels

Original: CVE-2020-14190 advisory advisory-to-release cvss-medium security

New: CVE-2020-14190 advisory advisory-to-release cvss-medium release-490 security

Marek Parfianowicz made changes - 16/Mar/2021 11:10 AM

Fix Version/s

Original: 4.9.0 [ 90694 ]

AB made changes - 25/Nov/2020 9:52 PM

Summary

Original: A user-supplied regex in EyeQL causes ReDoS - CVE-PENDING

New: A user-supplied regex in EyeQL causes ReDoS - CVE-2020-14190

AB made changes - 25/Nov/2020 9:51 PM

Labels

Original: advisory advisory-to-release cve-in-progress cvss-medium security

New: CVE-2020-14190 advisory advisory-to-release cvss-medium security

AB made changes - 25/Nov/2020 2:18 AM

Summary

Original: A user-supplied regex in EyeQL causes ReDoS

New: A user-supplied regex in EyeQL causes ReDoS - CVE-PENDING

AB made changes - 25/Nov/2020 2:18 AM

Description

Original: Affected version of Atlassian Fisheye/Crucible allow remote attackers to achieve Regex Denial of Service via user-supplied regex in EyeQL. The affected versions are before version 4.8.4.  CVE Pending. *Affected versions:*  * version < 4.8.4 *Fixed versions:*  * 4.8.4  * 4.9.0

New: Affected version of Atlassian Fisheye/Crucible allow remote attackers to achieve Regex Denial of Service via user-supplied regex in EyeQL. The affected versions are before version 4.8.4.  *Affected versions:*  * version < 4.8.4 *Fixed versions:*  * 4.8.4  * 4.9.0

David Black made changes - 23/Nov/2020 4:28 AM

Description

Original: Affected version of Atlassian FishEye/Crucible allow remote attackers to achieve Regex Denial of Service via user-supplied regex in EyeQL. The affected versions are before version 4.8.4.  CVE Pending. *Affected versions:*  * version < 4.8.4 *Fixed versions:*  * 4.8.4  * 4.9.0

New: Affected version of Atlassian Fisheye/Crucible allow remote attackers to achieve Regex Denial of Service via user-supplied regex in EyeQL. The affected versions are before version 4.8.4.  CVE Pending. *Affected versions:*  * version < 4.8.4 *Fixed versions:*  * 4.8.4  * 4.9.0

David Black made changes - 23/Nov/2020 4:25 AM

Labels

Original: advisory cve-in-progress cvss-medium security

New: advisory advisory-to-release cve-in-progress cvss-medium security

Load more older events