Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:JRASERVER-69858
HistoryAug 23, 2019 - 4:49 a.m.

The bundled Atlassian Universal Plugin Manager plugin had a CSRF issue - CVE-2019-14999

2019-08-2304:49:53
security-metrics-bot
jira.atlassian.com
86

EPSS

0.001

Percentile

32.4%

The version of the bundled Atlassian Universal Plugin Manager plugin had a CSRF vulnerability that allowed remote attackers, through an administrator, uninstall plugins through a rest endpoint. See https://ecosystem.atlassian.net/browse/UPM-6044 for more details.

EPSS

0.001

Percentile

32.4%

Related for ATLASSIAN:JRASERVER-69858