Affected versions of Atlassian FishEye and Crucible allow remote attackers to view sensitive information via an Information Disclosure vulnerability in a vulnerable version of the Application Links component.
The affected versions are before version 4.8.6.
Affected versions:
Fixed versions: