PT-2018-6634

Name of the Vulnerable Software and Affected Versions: Atlassian Bamboo versions prior to 6.3.1 Description: The issue allows remote attackers to modify user data, including passwords, via a Cross-site request forgery CSRF vulnerability. This is related to the update user administration resource...

CVE-2017-18042: Cross-Site Request Forgery (CSRF)

The update user administration resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify user data including passwords via a Cross-site request forgery CSRF vulnerability...