Loading...

XML

Word

Printable

Details

Type: Bug
Resolution: Fixed
Priority: Low
Fix Version/s: 8.4.0, 8.3.2, 7.13.12
Affects Version/s: 7.13.0, 8.2.1
Component/s: Administration - Others
Labels:
- CVE-2019-8447
- advisory
- advisory-released
- bugbounty
- csrf
- cvss-medium
- security
- xsrf

Fixed in Long Term Support Release/s:

Download 7.13
Introduced in Version:
7.13
Symptom Severity:
Severity 2 - Major
Bug Fix Policy:
View Atlassian Server bug fix policy

Description

The ServiceExecutor resource in Jira before version 8.3.2 allows remote attackers to trigger the creation of export files via a Cross-site request forgery (CSRF) vulnerability.

Attachments

Issue Links

relates to: RAID-1664 Loading...

Activity

People

Assignee:: Unassigned

Reporter:: Security Metrics Bot

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 09/Aug/2019 3:20 AM

Updated:: 22/May/2020 8:25 AM

Resolved:: 09/Aug/2019 3:23 AM