Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:JRASERVER-69781
HistoryAug 09, 2019 - 3:45 a.m.

The ViewSystemInfo class doGarbageCollection method was vulnerable to CSRF - CVE-2019-11588

2019-08-0903:45:12
security-metrics-bot
jira.atlassian.com
15

EPSS

0.001

Percentile

32.4%

The ViewSystemInfo class doGarbageCollection method in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to trigger garbage collection via a Cross-site request forgery (CSRF) vulnerability.

EPSS

0.001

Percentile

32.4%

Related for ATLASSIAN:JRASERVER-69781