Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: Atlassian Jira 7.13.6, 8.2.3 and 2 more versions Clear all filters
TI-2019-08662 CVE-2019-11589 · GHSA-ch69-fg75-f7x5

Open redirect in Atlassian Jira

Priority LOW 29

The ChangeSharedFilterOwner resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to attack users, in some cases be able to o…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01119 Published 2019-08-23 Fixed in 7.13.6, 8.2.3 +1 CWE-601
TI-2019-08661 CVE-2019-11588 · GHSA-p5r4-xgh7-j23r

Cross-site request forgery in Atlassian Jira

Priority LOW 22

The ViewSystemInfo class doGarbageCollection method in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to trigger garbage collectio…

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.00833 Published 2019-08-23 Fixed in 7.13.6, 8.2.3 +1 CWE-352
TI-2019-08660 CVE-2019-11587 · GHSA-q32m-2p66-w443

Cross-site request forgery in Atlassian Jira

Priority LOW 30

Various exposed resources of the ViewLogging class in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allow remote attackers to modify various settings via…

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.0084 Published 2019-08-23 Fixed in 7.13.6, 8.2.3 +1 CWE-352
TI-2019-08659 CVE-2019-11586 · GHSA-q82r-7f6x-3rcx

Cross-site request forgery in Atlassian Jira

Priority LOW 21

The AddResolution.jspa resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to create new resolutions via a Cross-site reque…

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.00679 Published 2019-08-23 Fixed in 7.13.6, 8.2.3 +1 CWE-352
TI-2019-08658 CVE-2019-11585 · GHSA-qghg-mq98-mjr4

Open redirect in Atlassian Jira

Priority LOW 30

The startup.jsp resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to redirect users to a different website which they may…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01303 Published 2019-08-23 Fixed in 7.13.6, 8.2.3 +1 CWE-601