Description

The AddResolution.jspa resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to create new resolutions via a Cross-site request forgery (CSRF) vulnerability.

Remediation

References

CVE-2019-11586

Related Vulnerabilities

ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-7419)

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1507)

WordPress Plugin Easy Preloader Cross-Site Scripting (1.0.0)

Joomla! Core 3.x.x Cross-Site Scripting (3.0.0 - 3.9.26)

WordPress Plugin Rating-Widget:Star Review System Security Bypass (2.8.9)

Severity

Medium

Classification

CVE-2019-11586 CWE-352

Tags

Missing Update Known Vulnerabilities