Lucene search

K
cvelistAtlassianCVELIST:CVE-2019-11588
HistoryAug 23, 2019 - 1:49 p.m.

CVE-2019-11588

2019-08-2313:49:47
atlassian
www.cve.org
6

AI Score

4.9

Confidence

High

EPSS

0.001

Percentile

32.4%

The ViewSystemInfo class doGarbageCollection method in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to trigger garbage collection via a Cross-site request forgery (CSRF) vulnerability.

CNA Affected

[
  {
    "product": "Jira",
    "vendor": "Atlassian",
    "versions": [
      {
        "lessThan": "7.13.6",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "8.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "8.2.3",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "8.3.0",
        "versionType": "custom"
      },
      {
        "lessThan": "8.3.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

AI Score

4.9

Confidence

High

EPSS

0.001

Percentile

32.4%

Related for CVELIST:CVE-2019-11588