CVE-2017-18041

The viewDeploymentVersionJiraIssuesDialog resource in Atlassian Bamboo before version 6.2.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of a release.

• CWE-79

• http://www.securityfocus.com/bid/103071Third Party Advisory, VDB Entry
• https://jira.atlassian.com/browse/BAM-19662Issue Tracking, Vendor Advisory
• http://www.securityfocus.com/bid/103071Third Party Advisory, VDB Entry
• https://jira.atlassian.com/browse/BAM-19662Issue Tracking, Vendor Advisory

Published

Feb 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-18035The /rest/review-coverage-chart/1.0/data/<repository_name>/.…
• CVE-2017-18036The Github repository importer in Atlassian Bitbucket Server…
• CVE-2017-18037The git repository tag rest resource in Atlassian Bitbucket …
• CVE-2017-18038The repository settings resource in Atlassian Bitbucket Serv…
• CVE-2017-18039The IncomingMailServers resource in Atlassian Jira from vers…
• CVE-2017-18040The viewDeploymentVersionCommits resource in Atlassian Bambo…
• CVE-2017-18042The update user administration resource in Atlassian Bamboo …
• CVE-2017-18043Integer overflow in the macro ROUND_UP (n, d) in Quick Emula…
• CVE-2017-18044A Command Injection issue was discovered in ContentStore/Bas…
• CVE-2017-18045JBMC DirectAdmin before 1.52, when the email_ftp_password_ch…
• CVE-2017-18046Buffer overflow on Dasan GPON ONT WiFi Router H640X 12.02-01…
• CVE-2017-18047Buffer Overflow in the FTP client in LabF nfsAxe 3.7 allows …