Medium severity6.5NVD Advisory· Published Sep 18, 2018· Updated Jun 17, 2026

CVE-2018-13398

Description

The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attackers to modify smart-commit settings via a Cross-site request forgery (CSRF) vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Atlassian/Fisheyellm-fuzzy
Range: <4.5.4
Atlassian/Cruciblellm-fuzzy
Range: <4.5.4
Atlassian/Fisheye and Cruciblecpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

jira.atlassian.com/browse/CRUC-8312nvdThird Party Advisory
jira.atlassian.com/browse/FE-7100nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000