Medium severity5.4NVD Advisory· Published Feb 2, 2018· Updated Jun 17, 2026

CVE-2017-18040

Description

The viewDeploymentVersionCommits resource in Atlassian Bamboo before version 6.2.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of a release.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Atlassian/Bamboollm-fuzzy2 versions
<6.2.0+ 1 more
- (no CPE)range: <6.2.0
- (no CPE)range: prior to 6.2.0

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/103070nvdThird Party AdvisoryVDB Entry
jira.atlassian.com/browse/BAM-19661nvdIssue TrackingVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000