Cross-Site Scripting Vulnerability in Atlassian Bamboo
CVE-2017-18082

5.4MEDIUM

Key Information:

Vendor
Atlassian
Status
Bamboo
Vendor
CVE Published:
2 February 2018

Summary

A vulnerability in Atlassian Bamboo allows remote attackers to exploit improper input handling through the branch naming feature. Attackers can inject arbitrary HTML or JavaScript into web pages via crafted branch names. This security flaw could lead to unauthorized information access or the execution of malicious scripts in the context of the affected user. It is crucial for users of affected versions to apply the necessary updates to mitigate the risks associated with this vulnerability.

Affected Version(s)

Bamboo prior to 6.2.3

References

https://jira.atlassian.com/browse/BAM-19666
x_refsource_CONFIRM

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.