description: The administrative smart-commits resource in Atlassian Fisheye and Crucible before version 4.5.4 allows remote attackers to modify smart-commit settings via a Cross-site request forgery (CSRF) vulnerability.
problem types: Cross-Site Request Forgery (CSRF)
affected:
{
product: Fisheye and Crucible
vendor: Atlassian
versions:
lessThan: 4.5.4, status: affected, version: unspecified, versionType: custom
}