Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-11586)

Description

The AddResolution.jspa resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to create new resolutions via a Cross-site request forgery (CSRF) vulnerability.

Remediation

References

Related Vulnerabilities

Severity

Medium

Classification

CVE-2019-11586 CWE-352

Tags

Missing Update Known Vulnerabilities