The acceptAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed version in Confluence version 6.9.0, allows remote attackers to modify a comment into an answer via a Cross-site request forgery (CSRF) vulnerability.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: atlassian
Published: 2018-08-15T12:00:00Z
Updated: 2024-09-16T22:51:01.482Z
Reserved: 2018-07-06T00:00:00
Link: CVE-2018-13394
Vulnrichment
No data.
NVD
Status : Modified
Published: 2018-08-15T12:29:00.447
Modified: 2024-11-21T03:47:01.127
Link: CVE-2018-13394
Redhat
No data.