Description

The ViewSystemInfo class doGarbageCollection method in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to trigger garbage collection via a Cross-site request forgery (CSRF) vulnerability.

Remediation

References

CVE-2019-11588

Related Vulnerabilities

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0127)

WordPress Plugin Lightbox Plus Colorbox Cross-Site Scripting (2.7.2)

WordPress Plugin WP e-Commerce-Store Exporter Privilege Escalation (1.6.6)

WordPress Plugin BIC Media Widget Cross-Site Scripting (1.0)

WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker Cross-Site Scripting (6.3.4)

Severity

Medium

Classification

CVE-2019-11588 CWE-352

Tags

Missing Update Known Vulnerabilities