
CVE-2018-13393
https://notcve.org/view.php?id=CVE-2018-13393
15 Aug 2018 — The convertCommentToAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed version in Confluence version 6.9.0, allows remote attackers to modify a comment into an answer via a Cross-site request forgery (CSRF) vulnerability. El recurso convertCommentToAnswer en Atlassian Confluence Questions en versiones anteriores a la 2.6.6, la versión empaquetada de Confluence Questions se actualizó a una versión arreglada en Confluence ... • http://www.securityfocus.com/bid/105155 • CWE-352: Cross-Site Request Forgery (CSRF) •

CVE-2018-13394
https://notcve.org/view.php?id=CVE-2018-13394
15 Aug 2018 — The acceptAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed version in Confluence version 6.9.0, allows remote attackers to modify a comment into an answer via a Cross-site request forgery (CSRF) vulnerability. El recurso acceptAnswer en Atlassian Confluence Questions en versiones anteriores a la 2.6.6, la versión empaquetada de Confluence Questions se actualizó a una versión arreglada en Confluence 6.9.0, permite que l... • http://www.securityfocus.com/bid/105284 • CWE-352: Cross-Site Request Forgery (CSRF) •