Description

The AddResolution.jspa resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to create new resolutions via a Cross-site request forgery (CSRF) vulnerability.

Remediation

References

CVE-2019-11586

Related Vulnerabilities

Nginx buffer underflow vulnerability

Nginx CVE-2011-4963 Vulnerability (CVE-2011-4963)

WordPress Plugin TablePress XML External Entity Injection (1.8)

Atlassian Jira CVE-2019-20898 Vulnerability (CVE-2019-20898)

WordPress Plugin WP-AutoYoutube 'index.php' Script SQL Injection (0.1)

Severity

Medium

Classification

CVE-2019-11586 CWE-352

Tags

Missing Update Known Vulnerabilities