Lucene search
+L

3 matches found

CVE
CVE
added 2018/08/15 12:0 p.m.52 views

CVE-2018-13394

CVE-2018-13394 affects Atlassian Confluence Questions prior to 2.6.6. The vulnerability is a CSRF in the acceptAnswer resource that lets an attacker, via a remote request, convert a comment into an accepted answer. The fixed version is bundled in Confluence 6.9.0 (and the Questions add-on should ...

6.5CVSS6.5AI score0.00841EPSS
SaveExploits0References2Affected Software1
Atlassian
Atlassian
added 2018/08/15 1:1 a.m.576 views

The acceptAnswer resource of Confluence Questions was vulnerable to CSRF - CVE-2018-13394

The acceptAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed version in Confluence version 6.9.0, allows remote attackers to make a user accept an answer via a Cross-site request forgery CSRF vulnerability...

6.5CVSS6AI score0.00841EPSS
SaveExploits0Affected Software1
Atlassian
Atlassian
added 2018/08/15 1:1 a.m.39 views

The acceptAnswer resource of Confluence Questions was vulnerable to CSRF - CVE-2018-13394

The acceptAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed version in Confluence version 6.9.0, allows remote attackers to make a user accept an answer via a Cross-site request forgery CSRF vulnerability...

6.5CVSS6AI score0.00841EPSS
SaveExploits0
Rows per page
Query Builder