Medium severity6.5NVD Advisory· Published Aug 15, 2018· Updated Jun 17, 2026

CVE-2018-13393

Description

The convertCommentToAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed version in Confluence version 6.9.0, allows remote attackers to modify a comment into an answer via a Cross-site request forgery (CSRF) vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Atlassian/Atlassian Questions For Confluencellm-fuzzy2 versions
<2.6.6+ 1 more
- (no CPE)range: <2.6.6
- (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/105155nvdThird Party AdvisoryVDB Entry
jira.atlassian.com/browse/CONFSERVER-56282nvdIssue TrackingVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000