Description

The ChangeSharedFilterOwner resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to attack users, in some cases be able to obtain a user's Cross-site request forgery (CSRF) token, via a open redirect vulnerability.

Remediation

References

CVE-2019-11589

Related Vulnerabilities

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-0218)

Oracle Database Server CVE-2013-5853 Vulnerability (CVE-2013-5853)

WordPress Plugin Booking Calendar Contact Form Multiple Vulnerabilities (1.0.23)

WordPress Plugin Hostel Cross-Site Scripting (1.1.3)

MediaWiki CVE-2023-29137 Vulnerability (CVE-2023-29137)

Severity

Medium

Classification

CVE-2019-11589 CWE-601 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities