• Type: Bug
• Resolution: Fixed
• Priority: Medium
• Fix Version/s: 6.2.0
• Affects Version/s: None
• Component/s: None
• Labels:

  • CVE-2017-18040
  • advisory
  • advisory-released
  • bamboo-bugfix-kanban
  • cvss-medium
  • security
  • xss

[BAM-19661] XSS in the viewDeploymentVersionCommits resource through the name of a release - CVE-2017-18040

Collapse comment: Security Metrics Bot added a comment - 02/Feb/2018 12:11 AM, Edited by David Black - 02/Feb/2018 3:58 AM

Security Metrics Bot added a comment - 02/Feb/2018 12:11 AM - edited

This is an independent assessment and you should evaluate its applicability to your own IT environment.
CVSS v3 score: 4.4 => Medium severity

Exploitability Metrics

Attack Vector	Network
Attack Complexity	High
Privileges Required	Low
User Interaction	Required

Scope Metric

Scope	Changed

Impact Metrics

Confidentiality	Low
Integrity	Low
Availability	None

https://asecurityteam.bitbucket.io/cvss_v3/#CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N/RC:U

Expand comment: Security Metrics Bot added a comment - 02/Feb/2018 12:11 AM, Edited by David Black - 02/Feb/2018 3:58 AM

Security Metrics Bot added a comment - 02/Feb/2018 12:11 AM - edited This is an independent assessment and you should evaluate its applicability to your own IT environment. CVSS v3 score: 4.4 => Medium severity Exploitability Metrics Attack Vector Network Attack Complexity High Privileges Required Low User Interaction Required Scope Metric Scope Changed Impact Metrics Confidentiality Low Integrity Low Availability None https://asecurityteam.bitbucket.io/cvss_v3/#CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N/RC:U