CVE-2019-15002

An exploitable Cross-Site Request Forgery (CSRF) vulnerability exists in Atlassian Jira versions 7.6.4 through 8.1.0 . The root cause is that the login form does not require a CSRF token. An attacker can exploit this by submitting a POST request to /login.jsp with a valid username and password, w...