Update atlassian-gadgets to 4.2.39 to fix CVE-2012-0881, CVE-2014-0114 and other vulnerabilities

XMLWordPrintable

    • 5.3
    • Medium
    • CVE-2012-0881

      Affected versions of Atlassian Fisheye and Crucible allow an unauthenticated remote attacker to achieve remote code execution, denial of service and XML external entities in Atlassian Gadgets. The CVEs involved were:

      • CVE-2012-0881
      • CVE-2019-10172
      • CVE-2018-1000632
      • CVE-2016-1000031
      • CVE-2014-0114
      • CVE-2020-26217

      The affected versions are before version 4.8.6.

      Affected versions:

      • version < 4.8.6

      Fixed versions:

      • 4.8.6  

            Assignee:
            Unassigned
            Reporter:
            Security Metrics Bot
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: