Lucene search
AtlassianCVELIST:CVE-2017-18081HistoryFeb 02, 2018 - 2:00 p.m.
CVE-2017-18081
2018-02-0214:00:00
atlassian
www.cve.org
4
EPSS
0.001
Percentile
40.6%
The signupUser resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the value of the csrf token cookie.
CNA Affected
[
{
"product": "Bamboo",
"vendor": "Atlassian",
"versions": [
{
"status": "affected",
"version": "prior to 6.3.1"
}
]
}
]Related
nvd
nvd
CVE-2017-18081
2018-02-02 14:29:01
cve
cve
CVE-2017-18081
2018-02-02 14:29:01
prion
prion
Cross site scripting
2018-02-02 14:29:00