Fisheye Multiple Vulnerabilities

Fisheye and Crucible are prone to cross-site scripting, security- bypass, and information-disclosure vulnerabilities. Attackers can exploit these issues to execute arbitrary script code in the context of the website, steal cookie-based authentication information, disclose sensitive information, or bypass certain security restrictions. Fisheye and Crucible versions prior to 2.4.4 are vulnerable.