Skip to content
OpenAdvisories
Unscored CVE-2017-18080 EUVD-2017-9217GHSA-x9vw-wj8p-6q2m

The saveConfigureSecurity resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify security settings via a Cross…

Published Feb 2, 2018 · Updated Sep 16, 2024 · Assigned by atlassian

Description

The saveConfigureSecurity resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify security settings via a Cross-site request forgery (CSRF) vulnerability.

Affected products

VendorProductAffectedFixed
Atlassian Bamboo prior to 6.3.1 —

References