CVE-2017-18040

The viewDeploymentVersionCommits resource in Atlassian Bamboo before version 6.2.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of a release.

• CWE-79

• http://www.securityfocus.com/bid/103070Third Party Advisory, VDB Entry
• https://jira.atlassian.com/browse/BAM-19661Issue Tracking, Vendor Advisory
• http://www.securityfocus.com/bid/103070Third Party Advisory, VDB Entry
• https://jira.atlassian.com/browse/BAM-19661Issue Tracking, Vendor Advisory

Published

Feb 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-18034The source browse resource in Atlassian Fisheye and Crucible…
• CVE-2017-18035The /rest/review-coverage-chart/1.0/data/<repository_name>/.…
• CVE-2017-18036The Github repository importer in Atlassian Bitbucket Server…
• CVE-2017-18037The git repository tag rest resource in Atlassian Bitbucket …
• CVE-2017-18038The repository settings resource in Atlassian Bitbucket Serv…
• CVE-2017-18039The IncomingMailServers resource in Atlassian Jira from vers…
• CVE-2017-18041The viewDeploymentVersionJiraIssuesDialog resource in Atlass…
• CVE-2017-18042The update user administration resource in Atlassian Bamboo …
• CVE-2017-18043Integer overflow in the macro ROUND_UP (n, d) in Quick Emula…
• CVE-2017-18044A Command Injection issue was discovered in ContentStore/Bas…
• CVE-2017-18045JBMC DirectAdmin before 1.52, when the email_ftp_password_ch…
• CVE-2017-18046Buffer overflow on Dasan GPON ONT WiFi Router H640X 12.02-01…