PT-2018-6679

Name of the Vulnerable Software and Affected Versions: Atlassian JIRA Server versions prior to 7.6.5 Atlassian JIRA Server versions 7.7.0 through 7.7.2 Atlassian JIRA Server versions 7.8.0 through 7.8.2 Atlassian JIRA Server version 7.9.0 Description: The issue is related to missing permission...

Cross site request forgery (csrf)

The Jira-importers-plugin in Atlassian Jira before version 7.6.1 allows remote attackers to create new projects and abort an executing external system import via various Cross-site request forgery CSRF vulnerabilities...

Various Cross-site request forgery(CSRF) vulnerabilities in the Jira-importers-plugin - CVE-2017-18033

The Jira-importers-plugin in Atlassian Jira before version 7.6.1 allows remote attackers to create new projects and abort an executing external system import via various Cross-site request forgery CSRF vulnerabilities...