CVE-2017-18095CWE-863

The SnippetRPCServiceImpl class in Atlassian Crucible before version 4.5.1 (the fixed version 4.5.x) and before 4.6.0 allows remote attackers to comment on…

published February 19, 2018

CVSS
—
EPSS
1%
Percentile
62.9
In the wild
Unconfirmed
What it is

The SnippetRPCServiceImpl class in Atlassian Crucible before version 4.5.1 (the fixed version 4.5.x) and before 4.6.0 allows remote attackers to comment on snippets they do not have authorization to access via an improper authorization vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01023 · 62.9th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2018-02-19T14:00Z
EPSS history
Timeline
  • 19 FEB 14:00Z
    The SnippetRPCServiceImpl class in Atlassian Crucible before version 4.5.1 (the fixed version 4.5.x) and before 4.6.0 allows remote attackers to comment on…
    cvelistv5