Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify Wallboard settings via a Cross-site request forgery (CSRF) vulnerability. The affected versions are before version 7.13.9, and from version 8.0.0 before 8.4.2.

Remediation

References

CVE-2019-20411

Related Vulnerabilities

PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-5900)

WordPress Plugin Google Sitemap by BestWebSoft Cross-Site Scripting (3.0.7)

XOOPS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-12139)

Jboss EAP Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-3518)

Dot CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-10007)

Severity

Medium

Classification

CVE-2019-20411 CWE-352

Tags

Missing Update Known Vulnerabilities