Skip to content
OpenAdvisories
Unscored CVE-2017-18042 EUVD-2017-9182GHSA-r9x7-xrj8-46fr

The update user administration resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify user data including pass…

Published Feb 2, 2018 · Updated Sep 17, 2024 · Assigned by atlassian

Vendor: Atlassian Product: Bamboo

Description

The update user administration resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify user data including passwords via a Cross-site request forgery (CSRF) vulnerability.

Affected products

VendorProductAffectedFixed
Atlassian Bamboo prior to 6.3.1 —

References