Security Advisory

CVE-2018-13398

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-09-18 14:00:00
Last updated 2024-09-16 18:34:54
Assigner atlassian
State PUBLISHED

Description

The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attackers to modify smart-commit settings via a Cross-site request forgery (CSRF) vulnerability.