Description

The AddResolution.jspa resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to create new resolutions via a Cross-site request forgery (CSRF) vulnerability.

Remediation

References

CVE-2019-11586

Related Vulnerabilities

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7897)

Internet Information Services Other Vulnerability (CVE-2000-0631)

CubeCart Improper Access Control Vulnerability (CVE-2015-6928)

Ruby Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-14033)

WordPress Plugin Real Media Library:Media Library Folder & File Manager Cross-Site Scripting (4.18.28)

Severity

Medium

Classification

CVE-2019-11586 CWE-352

Tags

Missing Update Known Vulnerabilities