Description

The WorkflowResource class removeStatus method in Jira before version 7.13.12, from version 8.0.0 before version 8.4.3, and from version 8.5.0 before version 8.5.2 allows authenticated remote attackers who do not have project administration access to remove a configured issue status from a project via a missing authorisation check.

Remediation

References

CVE-2019-15013

Related Vulnerabilities

WebLogic CVE-2016-0577 Vulnerability (CVE-2016-0577)

WordPress 3.7.x Multiple Vulnerabilities (3.7 - 3.7.12)

Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-35413)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-7453)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Scripting (2.0.25)

Severity

Medium

Classification

CVE-2019-15013 CWE-862

Tags

Missing Update Known Vulnerabilities