Lucene search

CVE-2019-20099

🗓️ 12 Feb 2020 14:11:15Reported by atlassianType

Atlassian Jira Server and Data Center before version 8.7.0 CSRF vulnerabilit

Reporter	Title	Published	Views	Family All 6
Atlassian	CSRF in VerifyPopServerConnection!add.jspa - CVE-2019-20099	5 Feb 202016:03	–	atlassian
Atlassian	CSRF in VerifyPopServerConnection!add.jspa - CVE-2019-20099	5 Feb 202016:03	–	atlassian
NVD	CVE-2019-20099	12 Feb 202014:15	–	nvd
Cvelist	CVE-2019-20099	12 Feb 202014:07	–	cvelist
Prion	Cross site request forgery (csrf)	12 Feb 202014:15	–	prion
Tenable Nessus	Atlassian JIRA 7.x >= 7.6 / 8.x < 8.5.4 / 8.6.x < 8.6.2 Multiple CSRF	21 Feb 202000:00	–	nessus

Nvd

Node

atlassian jira_data_centerRange7.6.15–8.5.4

atlassian jira_data_centerRange8.5.5–8.6.2

atlassian jira_serverRange7.6.15–8.5.4

atlassian jira_serverRange8.5.5–8.6.2

[
  {
    "product": "Jira Server",
    "vendor": "Atlassian",
    "versions": [
      {
        "lessThan": "8.7.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
tenable	www.tenable.com/security/research/tra-2020-05
jira	www.jira.atlassian.com/browse/JRASERVER-70606

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Feb 2020 14:15Current

4.5Medium risk

Vulners AI Score4.5

CVSS34.3

EPSS0.001

CWE-352