medium4.3
CVE-2019-20415
Atlassian Jira Server and Data Center in affected versions allows remote attackers to modify logging and profiling settings via a cross-site request forgery (C…
Impact
Atlassian Jira Server and Data Center in affected versions allows remote attackers to modify logging and profiling settings via a cross-site request forgery (CSRF) vulnerability. The affected versions are before version 7.13.3, and from version 8.0.0 before 8.1.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Jira | before 7.13.3 |
| Atlassian | Jira Data Center | from 8.0.0 before 8.1.0 |
| Atlassian | Jira Server | from 8.0.0 before 8.1.0 |
| Atlassian | Jira Software Data Center | before 7.13.3 |