Description
Various installation setup resources in Jira before version 8.5.2 allow remote attackers to configure a Jira instance, which has not yet finished being installed, via Cross-site request forgery (CSRF) vulnerabilities.
Remediation
References
Related Vulnerabilities
OpenSSL Out-of-bounds Read Vulnerability (CVE-2023-1255)
datatables Cross-site Scripting (XSS) Vulnerability (CVE-2015-6584)
WordPress 5.2.x Multiple Vulnerabilities (5.2 - 5.2.18)
Magento XML Injection (aka Blind XPath Injection) Vulnerability (CVE-2022-34253)
WordPress Plugin Livemesh Addons for Elementor Security Bypass (2.5.2)