CVE-2018-13399: Atlassian Crucible

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

The Microsoft Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows local attackers to escalate privileges because of weak permissions on the installation directory.

Affected products

• Atlassian Crucible: before 4.6.1 (fixed in 4.6.1)
• Atlassian Fisheye: before 4.6.1 (fixed in 4.6.1)

Published 2018-10-16. Last modified 2026-06-17.