medium4.3
CVE-2019-11586
The AddResolution.jspa resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remo…
Impact
The AddResolution.jspa resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to create new resolutions via a Cross-site request forgery (CSRF) vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Jira | before 7.13.6 |
| Atlassian | Jira Server | from 8.0.0 before 8.2.3 from 8.3.0 before 8.3.2 |