PT-2018-6634

Name of the Vulnerable Software and Affected Versions: Atlassian Bamboo versions prior to 6.3.1 Description: The issue allows remote attackers to modify user data, including passwords, via a Cross-site request forgery CSRF vulnerability. This is related to the update user administration resource...

Reflected xss in the System Notifications administration resource

The System Notifications administration resource is vulnerable to reflected xss through the url used to address the resource and any included parameters. For example: 1. http://localhost:8085/admin19279%27%20+%20alert%281%29%20+%27//904/viewSystemNotifications.action 2...