Description

The Jira-importers-plugin in Atlassian Jira before version 7.6.1 allows remote attackers to create new projects and abort an executing external system import via various Cross-site request forgery (CSRF) vulnerabilities.

Remediation

References

CVE-2017-18033

Related Vulnerabilities

WordPress Plugin Youzify-BuddyPress Community, User Profile, Social Network & Membership for WordPress SQL Injection (1.1.9)

Oracle JRE CVE-2020-2755 Vulnerability (CVE-2020-2755)

WordPress Plugin Comment Rating SQL Injection and Security Bypass Weakness Vulnerabilities (2.9.32)

MySQL Uncontrolled Resource Consumption Vulnerability (CVE-2025-50079)

phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-1902)

Severity

Medium

Classification

CVE-2017-18033 CWE-352

Tags

Missing Update Known Vulnerabilities