Description

The startup.jsp resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to redirect users to a different website which they may use as part of performing a phishing attack via an open redirect.

Remediation

References

CVE-2019-11585

Related Vulnerabilities

WordPress Plugin Bitcoin Satoshi Tools:Faucets, Visitor Rewarder, Satoshi Games, Referral Program Cross-Site Request Forgery (1.7.0)

Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-18260)

WordPress Plugin Google Map Backdoor (1.4)

Squid Improper Input Validation Vulnerability (CVE-2016-2570)

CKEditor Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-31541)

Severity

Medium

Classification

CVE-2019-11585 CWE-601

Tags

Missing Update Known Vulnerabilities