Description

The ServiceExecutor resource in Jira before version 8.3.2 allows remote attackers to trigger the creation of export files via a Cross-site request forgery (CSRF) vulnerability.

Remediation

References

CVE-2019-8447

Related Vulnerabilities

WordPress Plugin Tags Cloud Manager Cross-Site Scripting (1.0.0)

phpBB Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-6506)

Apache Tomcat Incomplete Cleanup Vulnerability (CVE-2023-42795)

Oracle JRE CVE-2017-10285 Vulnerability (CVE-2017-10285)

WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.1)

Severity

Medium

Classification

CVE-2019-8447 CWE-352 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities