CVE-2018-13398

Description

The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attackers to modify smart-commit settings via a Cross-site request forgery (CSRF) vulnerability.

Affected products

• Atlassian / Fisheye and Crucibleunspecified – 4.5.4

References

• MISChttps://jira.atlassian.com/browse/FE-7100
• MISChttps://jira.atlassian.com/browse/CRUC-8312