Skip to content
OpenAdvisories
Unscored CVE-2018-13398 EUVD-2018-5341GHSA-9xj3-f33j-rv5m

The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attackers to modify smart-co…

Published Sep 18, 2018 · Updated Sep 16, 2024 · Assigned by atlassian

Vendor: Atlassian Product: Fisheye and Crucible

Description

The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attackers to modify smart-commit settings via a Cross-site request forgery (CSRF) vulnerability.

Affected products

VendorProductAffectedFixed
Atlassian Fisheye and Crucible unspecified – < 4.5.4 4.5.4

References