CVE-2017-18081

Name of the Vulnerable Software and Affected Versions: Atlassian Bamboo versions prior to 6.3.1

Description: The issue allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability. This is achieved through the value of the csrf token cookie in the signupUser resource.

Recommendations: For versions prior to 6.3.1, update to version 6.3.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the signupUser resource until a patch is available.