Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2018-08-15	CVE-2018-13394	Cross-Site Request Forgery (CSRF) vulnerability in Atlassian Questions for Confluence The acceptAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed version in Confluence version 6.9.0, allows remote attackers to modify a comment into an answer via a Cross-site request forgery (CSRF) vulnerability. network low complexity atlassian CWE-352	6.5
2018-08-15	CVE-2018-13393	Cross-Site Request Forgery (CSRF) vulnerability in Atlassian Questions for Confluence The convertCommentToAnswer resource in Atlassian Confluence Questions before version 2.6.6, the bundled version of Confluence Questions was updated to a fixed version in Confluence version 6.9.0, allows remote attackers to modify a comment into an answer via a Cross-site request forgery (CSRF) vulnerability. network low complexity atlassian CWE-352	6.5