Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Atlassian Jira Server 8.7.0 Clear all filters
TI-2019-14509 CVE-2019-20100 · GHSA-mjf6-gmwv-grxx

Cross-site request forgery in Atlassian Application Links

Priority LOW 24

The Atlassian Application Links plugin is vulnerable to cross-site request forgery (CSRF).

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.01021 Published 2020-02-12 Fixed in 5.4.21, 6.0.12 +4 CWE-352
TI-2019-14508 CVE-2019-20099 · GHSA-hwx6-5mwj-gm4q

Cross-site request forgery in Atlassian Jira Server

Priority LOW 21

The VerifyPopServerConnection!add.jspa component in Atlassian Jira Server and Data Center before version 8.7.0 is vulnerable to cross-site request forgery (CSRF).

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00743 Published 2020-02-12 Fixed in 8.7.0 CWE-352
TI-2019-14507 CVE-2019-20098 · GHSA-cr52-r63c-m5wh

Cross-site request forgery in Atlassian Jira Server

Priority LOW 22

The VerifySmtpServerConnection!add.jspa component in Atlassian Jira Server and Data Center before version 8.7.0 is vulnerable to cross-site request forgery (CSRF).

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00815 Published 2020-02-12 Fixed in 8.7.0 CWE-352