Cross site request forgery (csrf)

2018-02-0214:29:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.7%

JSON

The saveConfigureSecurity resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify security settings via a Cross-site request forgery (CSRF) vulnerability.

CPENameOperatorVersion
bamboolt6.3.1

CPE	Name	Operator	Version
	bamboo	lt	6.3.1

References

jira.atlassian.com/browse/BAM-19664