Description
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify various resources via a Cross-Site Request Forgery (CSRF) vulnerability, following an Information Disclosure vulnerability in the referrer headers which discloses a user's CSRF token. The affected versions are before version 8.5.10, and from version 8.6.0 before 8.13.2.
Remediation
References
Related Vulnerabilities
MySQL CVE-2015-4771 Vulnerability (CVE-2015-4771)
Craft CMS Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2026-27127)
IBM WebSEAL CVE-2019-4135 Vulnerability (CVE-2019-4135)
WordPress Plugin Soundy Background Music Cross-Site Scripting (3.9)
Roundcube Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-62643)