2 results (0.012 seconds)

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0

15 Aug 2018 — The convertCommentToAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed version in Confluence version 6.9.0, allows remote attackers to modify a comment into an answer via a Cross-site request forgery (CSRF) vulnerability. El recurso convertCommentToAnswer en Atlassian Confluence Questions en versiones anteriores a la 2.6.6, la versión empaquetada de Confluence Questions se actualizó a una versión arreglada en Confluence ... • http://www.securityfocus.com/bid/105155 • CWE-352: Cross-Site Request Forgery (CSRF) •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0

15 Aug 2018 — The acceptAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed version in Confluence version 6.9.0, allows remote attackers to modify a comment into an answer via a Cross-site request forgery (CSRF) vulnerability. El recurso acceptAnswer en Atlassian Confluence Questions en versiones anteriores a la 2.6.6, la versión empaquetada de Confluence Questions se actualizó a una versión arreglada en Confluence 6.9.0, permite que l... • http://www.securityfocus.com/bid/105284 • CWE-352: Cross-Site Request Forgery (CSRF) •