It was possible for double OGNL evaluation in certain redirect action and in WebWork URL and Anchor tags in JSP files to occur

🚨 Double OGNL evaluation can lead to some serious Java mischief! An attacker with access to the Fisheye or Crucible web interface can execute their own Java code - think of it as a surprise guest crashing your party. 🎉 Imagine if someone could sneak into your kitchen and whip up any dish they wanted while you were busy hosting a dinner party. This vulnerability lets attackers serve their own dangerous code if they gain access to the vulnerable web interface of Fisheye or Crucible. An attacker could exploit this vulnerability to run arbitrary Java code, potentially compromising the entire system! This could lead to unauthorized access, data theft, or even complete control over your application’s environment - not exactly the kind of guest you want hanging around! ⚡

An attacker could exploit this vulnerability to run arbitrary Java code, potentially compromising the entire system! This could lead to unauthorized access, data theft, or even complete control over your application’s environment - not exactly the kind of guest you want hanging around! ⚡ To secure your environment, immediately update Fisheye and Crucible to version 4.4.5 or from 4.5.0 to 4.5.2. It's also a good idea to review access controls to the web interface to limit potential exploitation. You've got this! With this update, you'll keep the kitchen safe and secure from unwanted intrusions! 🛡️