[JRASERVER-70881] CSRF on Wallboard endpoint - CVE-2019-20411 - Create and track feature requests for Atlassian products.

Type: Bug
Resolution: Fixed
Priority: Low (View bug fix roadmap)
Fix Version/s: 8.4.2, 7.13.9, 8.5.0
Affects Version/s: 8.2.4, 7.13.6
Component/s: Application Links
Labels:
- CVE-2019-20411
- advisory
- advisory-released
- bugbash2
- bugbounty
- csrf
- cvss-medium
- security
- xsrf

Fixed in Long Term Support Release/s:

Download 7.13, 8.5
Introduced in Version:
7.13
Symptom Severity:
Severity 2 - Major
Bug Fix Policy:
View Atlassian Server bug fix policy

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify Wallboard settings via a Cross-site request forgery (CSRF) vulnerability.

Affected versions:

version < 7.13.9
8.0.0 ≤ version < 8.4.2

Fixed versions:

7.13.9
8.4.2
8.5.0

Assignee:: Unassigned

Reporter:: Security Metrics Bot

Affected customers:: 0 This affects my team

Watchers:: 0 Start watching this issue

Created:: 08/Apr/2020 3:00 AM

Updated:: 01/Jul/2020 12:41 AM

Resolved:: 08/Apr/2020 3:05 AM

Details

Description

Attachments

Forms

Activity

[JRASERVER-70881] CSRF on Wallboard endpoint - CVE-2019-20411

People

Dates