Atlassian, the maker of issue tracking tool Jira and team collaboration platform Confluence, has patched vulnerabilities that could allow an attacker to enable one-click account takeovers in Atlassian-owned websites. The vulnerabilities discovered by Check Point Research (CPR) could allow cross-site scripting, cross-site request forgery, and one-click account takeovers in Atlassian subdomains including those used for partners, developers, support, Jira, and Confluence.