high8.8
CVE-2017-18042
The update user administration resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify user data including passwords via a Cross-si…
Impact
The update user administration resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify user data including passwords via a Cross-site request forgery (CSRF) vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Bamboo | before 6.3.1 |