PT-2019-12396

CVE-2019-11586

·

Publicado

2019-08-23

·

Atualizado

2022-03-25

Descrição por

CVSS 2.0
4.3
Média
MétricasAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Jira versions prior to 7.13.6 Jira versions 8.0.0 through 8.2.3 Jira versions 8.3.0 through 8.3.2
Description The issue concerns a Cross-site request forgery (CSRF) vulnerability in the AddResolution.jspa resource. This allows remote attackers to create new resolutions.
Recommendations For versions prior to 7.13.6, update to version 7.13.6 or later. For versions 8.0.0 through 8.2.3, update to version 8.2.3 or later. For versions 8.3.0 through 8.3.2, update to version 8.3.2 or later.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-352: Cross-Site Request Forgery (CSRF)
Identificadores relacionados
CVE-2019-11586
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com