Lucene search
Security-metrics-botATLASSIAN:JRASERVER-70406HistoryDec 17, 2019 - 2:10 a.m.
Various Jira Server setup resources are vulnerable to XSRF/CSRF - CVE-2019-20401
2019-12-1702:10:53
security-metrics-bot
jira.atlassian.com
11
EPSS
0.001
Percentile
32.4%
Various installation setup resources in Jira before version 8.5.2 allow remote attackers to configure a Jira instance, which has not yet finished being installed, via Cross-site request forgery (CSRF) vulnerabilities.
Once a Jira instance is setup (i.e. database, admin account, licence, etc. form are filled) the vulnerability can’t be exploited anymore.
Related
nvd
nvd
CVE-2019-20401
2020-02-06 03:15:10
nessus
nessus
Atlassian Jira 7.6 < 8.5.2 XSRF (JRASERVER-70406)
2020-04-21 00:00:00
cve
cve
CVE-2019-20401
2020-02-06 03:15:10
prion
prion
Cross site request forgery (csrf)
2020-02-06 03:15:00
atlassian
atlassian
cvelist
cvelist
CVE-2019-20401
2020-02-06 03:10:26