Description

Various exposed resources of the ViewLogging class in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allow remote attackers to modify various settings via Cross-site request forgery (CSRF).

Remediation

References

CVE-2019-11587

Related Vulnerabilities

WordPress Plugin Aspose Cloud eBook Generator Arbitrary File Download (1.0)

WordPress Plugin GS Products Slider for WooCommerce Cross-Site Scripting (1.5.8)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-0215)

MySQL CVE-2019-2796 Vulnerability (CVE-2019-2796)

Drupal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-3223)

Severity

Medium

Classification

CVE-2019-11587 CWE-352

Tags

Missing Update Known Vulnerabilities