Loading HuntDB...

GHSA-5w4x-5vvq-236j

GitHub Security Advisory

⚠ Unreviewed CRITICAL Has CVE

Advisory Details

Atlassian Fisheye and Crucible versions less than 4.4.3 and version 4.5.0 are vulnerable to argument injection through filenames in Mercurial repositories, allowing attackers to execute arbitrary code on a system running the impacted software.

Related CVEs

Key Information

GHSA ID
GHSA-5w4x-5vvq-236j
Published
May 17, 2022 12:12 AM
Last Modified
May 17, 2022 12:12 AM
CVSS Score
9.0 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: July 29, 2025 6:37 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.