CVE-2024-23319

creationtimestamp| type| source ---|---|--- 2024-02-09 16:27:08+00:00| seen| https://t.me/ctinow/182114...

CVE-2024-23319 CSRF issue allows disconnecting a user's Jira connection through a simple post message (Jira Plugin)

Mattermost Jira Plugin fails to protect against logout CSRF allowing an attacker to post a specially crafted message that would disconnect a user's Jira connection in Mattermost only by viewing the message...

CVE-2024-23319 CSRF issue allows disconnecting a user's Jira connection through a simple post message (Jira Plugin)

Mattermost Jira Plugin fails to protect against logout CSRF allowing an attacker to post a specially crafted message that would disconnect a user's Jira connection in Mattermost only by viewing the message...

CVE-2024-23319

Affected software: Mattermost Jira Plugin. Vulnerability details: The plugin fails to protect against logout CSRF, allowing an attacker to disconnect a user’s Jira connection in Mattermost by simply viewing a crafted message. The issue lies in inadequate CSRF protection for logout-related actions...