Description

The ServiceExecutor resource in Jira before version 8.3.2 allows remote attackers to trigger the creation of export files via a Cross-site request forgery (CSRF) vulnerability.

Remediation

References

CVE-2019-8447

Related Vulnerabilities

Craft CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-30130)

Apache Tomcat Resource Management Errors Vulnerability (CVE-2011-0534)

Liferay DXP Improper Restriction of XML External Entity Reference Vulnerability (CVE-2024-25606)

WordPress Plugin TheCartPress eCommerce Shopping Cart 'OptionsPostsList.php' Cross-Site Scripting (1.1.6)

Apache HTTP Server Integer Overflow or Wraparound Vulnerability (CVE-2022-22721)

Severity

Medium

Classification

CVE-2019-8447 CWE-352 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities