CVE-2017-18082

CVE-2017-18082: vulnerability in Atlassian Bamboo

Published · Updated

Follow this CVE+ Monitor Bamboo

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.6%
The plan configure branches resource in Atlassian Bamboo before version 6.2.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the name of a branch.
Affected products
Atlassian · Bamboo
Related CVEs — Atlassian Bamboo

In the same product, most dangerous first.

CVE-2018-5224—CVE-2018-5224EPSS 2.7%CVE-2017-14590—CVE-2017-14590EPSS 2.4%CVE-2017-14589—CVE-2017-14589EPSS 1.9%CVE-2019-15005—CVE-2019-15005EPSS 1.3%CVE-2021-26067—CVE-2021-26067EPSS 1.1%CVE-2017-9514—CVE-2017-9514EPSS 1.0%