Atlassian JIRA 7.13.x < 7.13.6 / 8.x < 8.2.3 / 8.3.x < 8.3.2 Multiple Vulnerabilities

According to its self-reported version number, the instance of Atlassian JIRA hosted on the remote web server is potentially affected by multiple vulnerabilities: - An open redirect vulnerability exists in the startup.jsp resource. An unauthenticated, remote attacker can exploit this via the...

CVE-2019-11589

CVE-2019-11589 affects Atlassian Jira: ChangeSharedFilterOwner resource exposes an open redirect vulnerability in Jira versions 7.13.0–7.13.5, 8.0.0–8.2.2, and 8.3.0–8.3.1, allowing remote attackers to redirect users and potentially obtain their CSRF token. The issue is fixed in Jira 7.13.6, 8.2....

Open redirect in the ChangeSharedFilterOwner resource - CVE-2019-11589

The ChangeSharedFilterOwner resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to attack users, in some cases be able to obtain a user's Cross-site request forgery CSRF token, via a open redirect...