[BAM-19664] Cross-site request forgery (CSRF) in the saveConfigureSecurity resource - CVE-2017-18080 - Create and track feature requests for Atlassian products.

XML

Word

Printable

Details

Type: Bug
Status: Closed (View Workflow)
Priority: High
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 6.3.1
Component/s: None
Labels:

Symptom Severity:
Severity 2 - Major
Bug Fix Policy:
View Atlassian Server bug fix policy

Description

The saveConfigureSecurity resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify security settings via a Cross-site request forgery (CSRF) vulnerability.

Attachments

Activity

People

Assignee:: Unassigned

Reporter:: Security Metrics Bot

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Due:: 16/Mar/2018

Created:: 02/Feb/2018 12:11 AM

Updated:: 19/Aug/2019 2:05 AM

Resolved:: 02/Feb/2018 3:12 AM