CVE-2017-18040

No fix known EPSS <1%

The viewDeploymentVersionCommits resource in Atlassian Bamboo before version 6.2.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of a release.

Published 2018-02-02 · CVE record · OSV

Products: Atlassian Bamboo