Description
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify various resources via a Cross-Site Request Forgery (CSRF) vulnerability, following an Information Disclosure vulnerability in the referrer headers which discloses a user's CSRF token. The affected versions are before version 8.5.10, and from version 8.6.0 before 8.13.2.
Remediation
References
Related Vulnerabilities
Oracle Database Server CVE-2011-0792 Vulnerability (CVE-2011-0792)
WordPress Plugin Thank You Counter Button Cross-Site Scripting (1.8.2)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0125)
WordPress Plugin Auto Amazon Links-Amazon Associates Affiliate Unspecified Vulnerability (2.0.3.4)
PHP Integer Overflow or Wraparound Vulnerability (CVE-2015-2305)