CVE-2019-11587

Various exposed resources of the ViewLogging class in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allow remote attackers to modify various settings via Cross-site request forgery (CSRF).

Score

CVSS 3.0 6.5 Medium

Status

Modified - security@atlassian.com

Published

2019-08-23

Last modified

2024-09-17

Weaknesses

CWE-352

Affected products

• Jira (Atlassian)
• Jira Server (Atlassian)

References

• https://jira.atlassian.com/browse/JRASERVER-69782