[%22Vendor] CSRF in the setup resources - CVE-2020-4018 - Create and track feature requests for Atlassian products.

Type: Bug
Resolution: Fixed
Priority: Low
Fix Version/s: 4.8.1
Affects Version/s: 4.7.2
Component/s: Server administration
Labels:

Symptom Severity:
Severity 3 - Minor
Bug Fix Policy:
View Atlassian Server bug fix policy

The setup resources in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to complete the setup process via a cross-site request forgery (CSRF) vulnerability.

relates to

FE-7287 CSRF in the setup resources - CVE-2020-4018

Closed

Assignee:: Unassigned

Reporter:: Security Metrics Bot

Affected customers:: 0 This affects my team

Watchers:: 0 Start watching this issue

Created:: 16/Apr/2020 7:57 PM

Updated:: 09/Nov/2023 9:44 AM

Resolved:: 17/Apr/2020 2:34 AM

Details

Description

Attachments

Issue Links

Forms

Activity

[CRUC-8471] CSRF in the setup resources - CVE-2020-4018

People

Dates