PT-2020-10418
CVE-2019-20401
·
تاريخ النشر
2020-02-06
·
تاريخ التحديث
2022-03-25
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Jira versions prior to 8.5.2
Description
The issue concerns a Cross-site request forgery (CSRF) vulnerability that allows remote attackers to configure a Jira instance that has not yet finished being installed. This can be done by exploiting various installation setup resources in Jira.
Recommendations
For versions prior to 8.5.2, update to version 8.5.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the installation setup resources to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾