Description

The startup.jsp resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to redirect users to a different website which they may use as part of performing a phishing attack via an open redirect.

Remediation

References

CVE-2019-11585

Related Vulnerabilities

Resin Application Server Other Vulnerability (CVE-2004-0281)

Drupal Core 5.x Cross-Site Request Forgery (5.0 - 5.2)

WordPress Plugin Tom M8te Directory Traversal (1.5.3)

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-0276)

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6927)

Severity

Medium

Classification

CVE-2019-11585 CWE-601

Tags

Missing Update Known Vulnerabilities