PT-2022-11954

CVE-2021-43956

·

Published

2022-03-16

·

Updated

2022-03-22

Description by

CVSS 3.1
6.1
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Fisheye and Crucible versions prior to 4.8.9
Description The issue allows remote attackers to inject arbitrary HTML and/or JavaScript via a prototype pollution vulnerability in the jQuery deserialize library.
Recommendations For versions prior to 4.8.9, update to version 4.8.9 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-1321: Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
Related identifiers
CVE-2021-43956
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com