CVE-2019-20099: Cross-Site Request Forgery (CSRF)

The VerifyPopServerConnection!add.jspa component in Atlassian Jira Server and Data Center before version 8.7.0 is vulnerable to cross-site request forgery CSRF. An attacker could exploit this by tricking an administrative user into making malicious HTTP requests, allowing the attacker to enumerat...

PT-2020-10337

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 8.7.0 Description The issue allows an attacker to exploit cross-site request forgery CSRF in the VerifyPopServerConnection!add.jspa component. This can be achieved by tricking an...