Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:JRASERVER-70849
HistoryApr 01, 2020 - 4:01 a.m.

CSRF via Logging and Profiling feature - CVE-2019-20415

2020-04-0104:01:59
security-metrics-bot
jira.atlassian.com
75

0.001 Low

EPSS

Percentile

32.6%

Atlassian Jira Server and Data Center in affected versions allows remote attackers to modify logging and profiling settings via a cross-site request forgery (CSRF) vulnerability.

Affected versions:

  • version < 7.13.3
  • 8.0.0 ≤ version < 8.1.0

Fixed versions:

  • 7.13.3
  • 8.1.0

0.001 Low

EPSS

Percentile

32.6%

Related for ATLASSIAN:JRASERVER-70849