CVE-2018-13394

—

CVSS 3.0

6.5 medium

EPSS

<1%p56

Published

Aug 15, 2018 (Aug 15, 2018)

Modified

Jun 17, 2026

Description

The acceptAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed version in Confluence version 6.9.0, allows remote attackers to modify a comment into an answer via a Cross-site request forgery (CSRF) vulnerability.

Vendors: atlassian
Products: questions for confluence
Weakness: CWE-352
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.