Lucene search
+L

6 matches found

Tenable Nessus
Tenable Nessus
•added 2020/02/21 12:00 a.m.•42 views

Atlassian JIRA 7.x >= 7.6 / 8.x < 8.5.4 / 8.6.x < 8.6.2 Multiple CSRF

According to its self-reported version number, the instance of Atlassian JIRA hosted on the remote web server is 7.x greater than or equal to 7.6, 8.x prior to 8.5.4, or 8.6.x prior to 8.6.2. It is, therefore, affected by multiple vulnerabilities: - An input-validation flaw exists related to the...

4.3CVSS4.9AI score0.00815EPSS
SaveExploits2References4
Prion
Prion
•added 2020/02/12 2:15 p.m.•31 views

Cross site request forgery (csrf)

The VerifySmtpServerConnection!add.jspa component in Atlassian Jira Server and Data Center before version 8.7.0 is vulnerable to cross-site request forgery CSRF. An attacker could exploit this by tricking an administrative user into making malicious HTTP requests, allowing the attacker to enumera...

4.3CVSS4.5AI score0.00815EPSS
SaveExploits1References2Affected Software2
Cvelist
Cvelist
•added 2020/02/12 2:07 p.m.•39 views

CVE-2019-20098

The VerifySmtpServerConnection!add.jspa component in Atlassian Jira Server and Data Center before version 8.7.0 is vulnerable to cross-site request forgery CSRF. An attacker could exploit this by tricking an administrative user into making malicious HTTP requests, allowing the attacker to enumera...

4.5AI score0.00815EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/02/12 12:00 a.m.•7 views

PT-2020-10336

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 8.7.0 Description The issue allows an attacker to exploit cross-site request forgery CSRF in the VerifySmtpServerConnection!add.jspa component. This can be achieved by tricking an...

4.3CVSS0.00815EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/12 12:00 a.m.•4 views

CVE-2019-20098: Cross-Site Request Forgery (CSRF)

The VerifySmtpServerConnection!add.jspa component in Atlassian Jira Server and Data Center before version 8.7.0 is vulnerable to cross-site request forgery CSRF. An attacker could exploit this by tricking an administrative user into making malicious HTTP requests, allowing the attacker to enumera...

4.3CVSS5.5AI score0.00815EPSS
SaveExploits1References2
Atlassian
Atlassian
•added 2020/02/05 4:02 p.m.•125 views

CSRF in VerifySmtpServerConnection!add.jspa - CVE-2019-20098

The VerifySmtpServerConnection!add.jspa component in Atlassian Jira Server and Data Center before version 8.7.0 is vulnerable to cross-site request forgery CSRF. An attacker could exploit this by tricking an administrative user into making malicious HTTP requests, allowing the attacker to enumera...

4.3CVSS2.9AI score0.00815EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder