Uploaded image for project: 'Jira Cloud'
  1. Jira Cloud
  2. JSWCLOUD-5676 GH Webwork actions are vulnerable to XSRF.
  3. JSWCLOUD-5777

Add XSRF protection to LicenseAction

XMLWordPrintable

    • Icon: Sub-task Sub-task
    • Resolution: Fixed
    • Icon: Low Low
    • 6.0.4
    • None
    • None

          [JSWCLOUD-5777] Add XSRF protection to LicenseAction

          David Black added a comment -

          CVSS score: 5 => Medium severity
           
          Exploitability Metrics

          AccessVector Network
          AccessComplexity Low
          Authentication None

           
          Impact Metrics

          ConfImpact None
          IntegImpact Partial
          AvailImpact None

          See https://extranet.atlassian.com/display/SECCOUNCIL/How+to+evaluate+vulnerability+severity+under+CVSS for details and http://nvd.nist.gov/cvss.cfm?calculator&adv&version=2 for score calculator.

          David Black added a comment - CVSS score: 5 => Medium severity   Exploitability Metrics AccessVector Network AccessComplexity Low Authentication None   Impact Metrics ConfImpact None IntegImpact Partial AvailImpact None See https://extranet.atlassian.com/display/SECCOUNCIL/How+to+evaluate+vulnerability+severity+under+CVSS for details and http://nvd.nist.gov/cvss.cfm?calculator&adv&version=2 for score calculator.

          jhinch (Atlassian) added a comment -

          Branch GHS-5676-xsrf-fixes

          jhinch (Atlassian) added a comment - Branch GHS-5676 -xsrf-fixes

            Unassigned Unassigned
            jhinch jhinch (Atlassian)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: