4.8.2

DATE	CVE	VULNERABILITY TITLE	RISK
2020-12-21	CVE-2020-29447	Unrestricted Upload of File with Dangerous Type vulnerability in Atlassian Crucible Affected versions of Atlassian Crucible allow remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability in the file upload request feature of code reviews. network low complexity atlassian CWE-434	4.3
2020-11-25	CVE-2020-14190	Resource Exhaustion vulnerability in Atlassian Crucible Affected versions of Atlassian Fisheye/Crucible allow remote attackers to achieve Regex Denial of Service via user-supplied regex in EyeQL. network low complexity atlassian CWE-400	7.5
2020-11-25	CVE-2020-14191	Unspecified vulnerability in Atlassian Crucible Affected versions of Atlassian Fisheye/Crucible allow remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability in the MessageBundleResource within Atlassian Gadgets. network low complexity atlassian	7.5