CVE-2020-14191

Name of the Vulnerable Software and Affected Versions Atlassian Fisheye/Crucible versions prior to 4.8.4

Description The issue is related to a Denial of Service (DoS) vulnerability in the MessageBundleResource within Atlassian Gadgets, allowing remote attackers to impact the application's availability. It is also associated with incorrect cleanup or release of resources. Exploitation of this issue can enable a remote attacker to cause a denial of service.

Recommendations For versions prior to 4.8.4, update to version 4.8.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the MessageBundleResource within Atlassian Gadgets to minimize the risk of exploitation.