CVE-2018-13398

The vulnerability affects Atlassian Fisheye and Crucible’s administrative smart-commits resource prior to version 4.5.4, where insufficient CSRF protection allows remote attackers to modify smart-commit settings. Root cause is a CSRF flaw in the admin endpoint; impact is the ability to alter comm...

The administrative smart-commits resource was vulnerable to Cross-site request forgery (CSRF) - CVE-2018-13398

The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attackers to modify smart-commit settings via a Cross-site request forgery CSRF vulnerability...

The administrative smart-commits resource was vulnerable to Cross-site request forgery (CSRF) - CVE-2018-13398

The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attackers to modify smart-commit settings via a Cross-site request forgery CSRF vulnerability...