5 matches found
Cross site request forgery (csrf)
The acceptAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed version in Confluence version 6.9.0, allows remote attackers to modify a comment into an answer via a Cross-site request forgery CSRF vulnerability...
The acceptAnswer resource of Confluence Questions was vulnerable to CSRF - CVE-2018-13394
The acceptAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed version in Confluence version 6.9.0, allows remote attackers to make a user accept an answer via a Cross-site request forgery CSRF vulnerability...
The acceptAnswer resource of Confluence Questions was vulnerable to CSRF - CVE-2018-13394
The acceptAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed version in Confluence version 6.9.0, allows remote attackers to make a user accept an answer via a Cross-site request forgery CSRF vulnerability...
PT-2018-11796
Name of the Vulnerable Software and Affected Versions Atlassian Confluence Questions versions prior to 2.6.6 Confluence versions prior to 6.9.0 Description The issue allows remote attackers to modify a comment into an answer via a Cross-site request forgery CSRF vulnerability, specifically...
CVE-2018-13394: Cross-Site Request Forgery (CSRF)
The acceptAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed version in Confluence version 6.9.0, allows remote attackers to modify a comment into an answer via a Cross-site request forgery CSRF vulnerability...