medium6.5
CVE-2019-11587
Various exposed resources of the ViewLogging class in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before versio…
Impact
Various exposed resources of the ViewLogging class in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allow remote attackers to modify various settings via Cross-site request forgery (CSRF).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Jira | before 7.13.6 |
| Atlassian | Jira Server | from 8.0.0 before 8.2.3 from 8.3.0 before 8.3.2 |