Design/Logic Flaw

The Microsoft Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows local attackers to escalate privileges because of weak permissions on the installation directory...

CVE-2018-13399

The Microsoft Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows local attackers to escalate privileges because of weak permissions on the installation directory...

CVE-2018-13399

The Microsoft Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows local attackers to escalate privileges because of weak permissions on the installation directory...

CVE-2018-13399

The Microsoft Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows local attackers to escalate privileges because of weak permissions on the installation directory...

CVE-2018-13399

CVE-2018-13399 concerns the Microsoft Windows Installer used by Atlassian Fisheye and Crucible. The weakness is weak permissions on the installation directory, which can be exploited locally to escalate privileges. Affected versions are Atlassian Fisheye/Crucible Windows Installer prior to 4.6.1....

Atlassian Confluence MESILAT Zabbix Plugin Arbitrary File Read Vulnerability

Atlassian Confluence is a suite of professional enterprise knowledge management and collaboration software from Atlassian Australia, which can also be used to build enterprise WiKi.The software enables collaboration and knowledge sharing among team members.MESILAT Zabbix Plugin is one of the Zabb...

CVE-2018-18289

The MESILAT Zabbix plugin before 1.1.15 for Atlassian Confluence allows attackers to read arbitrary files...

CVE-2018-18289

The MESILAT Zabbix plugin before 1.1.15 for Atlassian Confluence allows attackers to read arbitrary files...

CVE-2018-18289

The CVE-2018-18289 entry concerns the MESILAT Zabbix Plugin for Atlassian Confluence, affected when using versions prior to 1.1.15. The vulnerability enables an attacker to read arbitrary files through the plugin. Public details in connected records confirm the affected product and vulnerable com...

Atlassian Fisheye and Crucible Cross-Site Request Forgery Vulnerabilities

Atlassian FishEye and Crucible are both products of the Australian company Atlassian, FishEye is a suite of software for deep viewing of source code repositories and Crucible is a suite of code review tools. A cross-site request forgery vulnerability exists in the administrative smart-commits...

CVE-2018-13398

The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attackers to modify smart-commit settings via a Cross-site request forgery CSRF vulnerability...

Cross site request forgery (csrf)

The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attackers to modify smart-commit settings via a Cross-site request forgery CSRF vulnerability...

CVE-2018-13398

The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attackers to modify smart-commit settings via a Cross-site request forgery CSRF vulnerability...

CVE-2018-13398

The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attackers to modify smart-commit settings via a Cross-site request forgery CSRF vulnerability...

CVE-2018-13398

The vulnerability affects Atlassian Fisheye and Crucible’s administrative smart-commits resource prior to version 4.5.4, where insufficient CSRF protection allows remote attackers to modify smart-commit settings. Root cause is a CSRF flaw in the admin endpoint; impact is the ability to alter comm...

The administrative smart-commits resource was vulnerable to Cross-site request forgery (CSRF) - CVE-2018-13398

The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attackers to modify smart-commit settings via a Cross-site request forgery CSRF vulnerability...

The administrative smart-commits resource was vulnerable to Cross-site request forgery (CSRF) - CVE-2018-13398

The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attackers to modify smart-commit settings via a Cross-site request forgery CSRF vulnerability...

The administrative smart-commits resource was vulnerable to Cross-site request forgery (CSRF) - CVE-2018-13398

The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attackers to modify smart-commit settings via a Cross-site request forgery CSRF vulnerability...

The administrative smart-commits resource was vulnerable to Cross-site request forgery (CSRF) - CVE-2018-13398

The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attackers to modify smart-commit settings via a Cross-site request forgery CSRF vulnerability...

confluence.rockethash.com XSS vulnerability

Open Bug Bounty ID: OBB-676597 Description| Value ---|--- Affected Website:| confluence.rockethash.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Atlassian Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...