Description

The WorkflowResource class removeStatus method in Jira before version 7.13.12, from version 8.0.0 before version 8.4.3, and from version 8.5.0 before version 8.5.2 allows authenticated remote attackers who do not have project administration access to remove a configured issue status from a project via a missing authorisation check.

Remediation

References

CVE-2019-15013

Related Vulnerabilities

Apache HTTP Server URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-1927)

GibbonEdu Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-23871)

Oracle JRE CVE-2013-1518 Vulnerability (CVE-2013-1518)

WebLogic CVE-2021-2136 Vulnerability (CVE-2021-2136)

Jenkins Other Vulnerability (CVE-2021-21682)

Severity

Medium

Classification

CVE-2019-15013 CWE-862

Tags

Missing Update Known Vulnerabilities