Cross site request forgery (csrf)

The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attackers to modify smart-commit settings via a Cross-site request forgery CSRF vulnerability...

PT-2018-11800

Name of the Vulnerable Software and Affected Versions Atlassian Fisheye and Crucible versions prior to 4.5.4 Description The issue allows remote attackers to modify smart-commit settings via a Cross-site request forgery CSRF vulnerability, affecting the administrative smart-commits resource...

The administrative smart-commits resource was vulnerable to Cross-site request forgery (CSRF) - CVE-2018-13398

The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attackers to modify smart-commit settings via a Cross-site request forgery CSRF vulnerability...