CVE-2016-4319

Atlassian JIRA Server before 7.1.9 has CSRF in auditing/settings.

Score

CVSS 3.0 8.8 High

Status

Modified - cret@cert.org

Published

2017-04-10

Last modified

2024-08-06

Weaknesses

CWE-352

Affected products

• Jira (Atlassian)

References

• http://www.securityfocus.com/bid/97517
• https://confluence.atlassian.com/jiracore/jira-core-7-1-x-release-notes-802161668.html#JIRACore7.1.xreleasenotes-v7.1.9…
• https://jira.atlassian.com/browse/JRA-61803
• https://jira.atlassian.com/browse/JRASERVER-61803
• https://jira.atlassian.com/secure/ReleaseNote.jspa?projectId=10240&version=62034