CVE-2018-13401

CVE-2018-13401 affects Atlassian Jira. The vulnerability is an open-redirect issue in the XsrfErrorAction resource that lets remote attackers obtain a user’s CSRF token. Affected Jira versions are: before 7.6.9; 7.7.0–before 7.7.5; 7.8.0–before 7.8.5; 7.9.0–before 7.9.3; 7.10.0–before 7.10.3; 7.1...

Open redirect in the XsrfErrorAction resource - CVE-2018-13401

The XsrfErrorAction resource in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, from version 7.10.0 before version 7.10.3, from version 7.11.0 before version 7.11.3, from version 7.12.0...

Open redirect in the XsrfErrorAction resource - CVE-2018-13401

The XsrfErrorAction resource in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, from version 7.10.0 before version 7.10.3, from version 7.11.0 before version 7.11.3, from version 7.12.0...