medium4.3
CVE-2019-15002
An exploitable CSRF vulnerability exists in Atlassian Jira, from versions 7.6.4 to 8.1.0.
Impact
An exploitable CSRF vulnerability exists in Atlassian Jira, from versions 7.6.4 to 8.1.0. The login form doesn’t require a CSRF token. As a result, an attacker can log a user into the system under an unexpected account.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Jira Data Center | from 7.6.4 through 8.1.0 |
| Atlassian | Jira Server | from 7.6.4 through 8.1.0 |