Description

Atlassian Jira Server and Data Center in affected versions allows remote attackers to modify logging and profiling settings via a cross-site request forgery (CSRF) vulnerability. The affected versions are before version 7.13.3, and from version 8.0.0 before 8.1.0.

Remediation

References

CVE-2019-20415

Related Vulnerabilities

WordPress Plugin WP Activity Log Cross-Site Request Forgery (4.1.3.2)

WordPress Plugin PureHTML 'alter.php' SQL Injection (1.0.0)

Zikula Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2011-0535)

PHP Other Vulnerability (CVE-2015-4601)

Dolphin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-3638)

Severity

Medium

Classification

CVE-2019-20415 CWE-352

Tags

Missing Update Known Vulnerabilities