Forums
Home Product Q&A Discussion groups Articles Ask a question Search
Learning
Events
Champions

Forums

Articles
Create
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Product Q&A
See all
Community resources
Top groups
Explore all groups
Community resources
Learn
Community resources
Events
Community resources

Is Crucible/Fisheye v4.8.13/4.8.14 vulnerable to CVE-2022-22978?

Kirk Williams
Kirk Williams August 9, 2023

Our Tenable scan has flagged our recent upgrade to Crucible/Fisheye 4.8.13/4.8.14 for containing a Sprint Security verision prior to 5.5.7 or 5.6.x prior to 5.6.4.

Docker container running on RHEL7.

Flagged file:

/var/lib/docker/overlay2/xxxx/merged/atlassian/apps/crucible/lib/spring-security-core-3.2.5.RELEASE.jar.

It is recommended the version be upgraded from 3.2.5 to 5.5.7.

Is Crucible impacted by this CVE?  Will there be an update to the latest image for this issue in the near future?

Answer
Watch
Like Be the first to like this
637 views

0 answers

Suggest an answer

Log in or Sign up to answer
Fisheye
Fisheye/Crucible
DEPLOYMENT TYPE
SERVER
VERSION
4.8.14
TAGS
AUG Leaders

Atlassian Community Events

    See all events
    Community
    Forums
    FAQs Forums guidelines
    Learning
    About learning Resources
    Events
    Champions
    Copyright © 2025 Atlassian
    Privacy Policy Notice at Collection Terms Security
    Welcome illustration

    Welcome to the new Atlassian Community

    Online forums and learning are now in one easy-to-use experience.

    By continuing, you accept the updated Community Terms of Use and acknowledge the Privacy Policy. Your public name, photo, and achievements may be publicly visible and available in search engines.