Description

The WorkflowResource class removeStatus method in Jira before version 7.13.12, from version 8.0.0 before version 8.4.3, and from version 8.5.0 before version 8.5.2 allows authenticated remote attackers who do not have project administration access to remove a configured issue status from a project via a missing authorisation check.

Remediation

References

CVE-2019-15013

Related Vulnerabilities

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-26032)

PostgreSQL CVE-2021-32029 Vulnerability (CVE-2021-32029)

WordPress 3.7.x Arbitrary File Deletion Vulnerability (3.7 - 3.7.26)

WordPress Plugin Fancy Slideshows Security Bypass (2.4)

Oracle Database Server CVE-2024-21184 Vulnerability (CVE-2024-21184)

Severity

Medium

Classification

CVE-2019-15013 CWE-862

Tags

Missing Update Known Vulnerabilities