8 matches found
EUVD-2018-5341
Malware in sbrugna...
Smart commit action do not respect user permission for Comment actions
h3. Summary When executing a smart commit for adding a comment as per Processing issues with Smart Commits|https://confluence.atlassian.com/jirasoftwareserver0904/processing-issues-with-smart-commits-1188765783.html, it is not failing even if the user does not have permission for the requested...
Atlassian Fisheye and Crucible Cross-Site Request Forgery Vulnerabilities
Atlassian FishEye and Crucible are both products of the Australian company Atlassian, FishEye is a suite of software for deep viewing of source code repositories and Crucible is a suite of code review tools. A cross-site request forgery vulnerability exists in the administrative smart-commits...
CVE-2018-13398
The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attackers to modify smart-commit settings via a Cross-site request forgery CSRF vulnerability...
CVE-2018-13398
The vulnerability affects Atlassian Fisheye and Crucible’s administrative smart-commits resource prior to version 4.5.4, where insufficient CSRF protection allows remote attackers to modify smart-commit settings. Root cause is a CSRF flaw in the admin endpoint; impact is the ability to alter comm...
CVE-2018-13398
The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attackers to modify smart-commit settings via a Cross-site request forgery CSRF vulnerability...
The administrative smart-commits resource was vulnerable to Cross-site request forgery (CSRF) - CVE-2018-13398
The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attackers to modify smart-commit settings via a Cross-site request forgery CSRF vulnerability...
The administrative smart-commits resource was vulnerable to Cross-site request forgery (CSRF) - CVE-2018-13398
The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attackers to modify smart-commit settings via a Cross-site request forgery CSRF vulnerability...