Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify Wallboard settings via a Cross-site request forgery (CSRF) vulnerability. The affected versions are before version 7.13.9, and from version 8.0.0 before 8.4.2.

Remediation

References

CVE-2019-20411

Related Vulnerabilities

Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-7937)

Drupal Files or Directories Accessible to External Parties Vulnerability (CVE-2017-6922)

Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2022-42129)

MySQL CVE-2016-5625 Vulnerability (CVE-2016-5625)

Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-1615)

Severity

Medium

Classification

CVE-2019-20411 CWE-352

Tags

Missing Update Known Vulnerabilities