Description

The Jira-importers-plugin in Atlassian Jira before version 7.6.1 allows remote attackers to create new projects and abort an executing external system import via various Cross-site request forgery (CSRF) vulnerabilities.

Remediation

References

CVE-2017-18033

Related Vulnerabilities

Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2019-19343)

Oracle JRE CVE-2020-2830 Vulnerability (CVE-2020-2830)

WordPress Plugin Active Directory Authentication Integration Cross-Site Scripting (0.6)

osCommerce Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2020-27976)

WordPress Plugin Easing Slider Multiple Cross-Site Scripting Vulnerabilities (2.2.0.6)

Severity

Medium

Classification

CVE-2017-18033 CWE-352

Tags

Missing Update Known Vulnerabilities