The signupUser resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the value of the csrf token cookie.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: atlassian
Published: 2018-02-02T14:00:00Z
Updated: 2024-09-16T23:35:48.417Z
Reserved: 2018-02-01T00:00:00
Link: CVE-2017-18081
Vulnrichment
No data.
NVD
Status : Modified
Published: 2018-02-02T14:29:01.137
Modified: 2024-11-21T03:19:19.293
Link: CVE-2017-18081
Redhat
No data.