Description

The ServiceExecutor resource in Jira before version 8.3.2 allows remote attackers to trigger the creation of export files via a Cross-site request forgery (CSRF) vulnerability.

Remediation

References

CVE-2019-8447

Related Vulnerabilities

MySQL CVE-2013-0367 Vulnerability (CVE-2013-0367)

Oracle JRE CVE-2013-1486 Vulnerability (CVE-2013-1486)

MySQL Improper Access Control Vulnerability (CVE-2015-3152)

Python Improper Input Validation Vulnerability (CVE-2020-8315)

WordPress Plugin vSlider Multi Image Slider for WordPress Multiple Vulnerabilities (4.1.2)

Severity

Medium

Classification

CVE-2019-8447 CWE-352 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities