PT-2019-13934

Name of the Vulnerable Software and Affected Versions Atlassian Fisheye and Crucible versions prior to 4.8.0 Description The issue concerns an improper authorization vulnerability in the /json/profile/removeStarAjax.do resource. This allows remote attackers to remove another user's favourite...