Details
-
Bug
-
Resolution: Fixed
-
Low
-
7.6.0, 7.13.0, 7.6.15, 8.5.1, 8.6.0, 7.13.12
-
7.06
-
Severity 3 - Minor
-
Description
The Applinks endpoint in Atlassian Jira Server and Data Center in affected versions allows remote attackers to enumerate local network resources via a cross-site request forgery (CSRF) vulnerability.
Affected versions:
- version < 8.5.4
- 8.6.0 ≤ version < 8.7.0
Fixed versions:
- 8.5.4
- 8.7.0