Security Advisory

CVE-2017-18042

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-02-02 14:00:00
Last updated 2024-09-17 00:32:15
Assigner atlassian
State PUBLISHED

Description

The update user administration resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify user data including passwords via a Cross-site request forgery (CSRF) vulnerability.