Description

The Setup Wizard in Atlassian JIRA Enterprise Edition before 3.12.1 does not properly restrict setup attempts after setup is complete, which allows remote attackers to change the default language.

Remediation

References

CVE-2007-6619

Related Vulnerabilities

AngularJS Inefficient Regular Expression Complexity Vulnerability (CVE-2024-21490)

SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-0933)

Oracle Application Server CVE-2008-2619 Vulnerability (CVE-2008-2619)

WordPress Plugin Total Security Multiple Unspecified Vulnerabilities (3.4.1)

Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-14443)

Severity

High

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2007-6619