CVE-2017-9512
The mostActiveCommitters.do resource in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote attackers to access sensitive information, for example email…
Published: 2017-08-24 · CVSS: 7.5 · CVSS 3.1
The mostActiveCommitters.do resource in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote attackers to access sensitive information, for example email addresses of committers, as it lacked permission checks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7