Description

The startup.jsp resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to redirect users to a different website which they may use as part of performing a phishing attack via an open redirect.

Remediation

References

CVE-2019-11585

Related Vulnerabilities

WordPress Plugin CommentLuv Cross-Site Scripting (2.92.3)

Ruby Uncontrolled Resource Consumption Vulnerability (CVE-2018-8777)

WordPress Ultimate Member Plugin CVE-2020-36170 Vulnerability (CVE-2020-36170)

Jboss EAP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-3873)

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Security Bypass (4.5.5)

Severity

Medium

Classification

CVE-2019-11585 CWE-601

Tags

Missing Update Known Vulnerabilities