Vulnerability fixed in Jira Seraph

A vulnerability has been fixed in Jira Seraph, the web framework used for authentication within Jira. The vulnerability allows a remote malicious party to circumvent authentication bypass authentication by sending a specially prepared HTTP request to the server. The application is only vulnerable...

CVE-2019-14998

Atlassian Jira versions before 8.4.0 are affected by CVE-2019-14998 due to a CSRF protection bypass in the Webwork CSRF mechanism: an attacker can bypass protection by using a subdomain cookie-tossing technique to trigger CSRF headers. Impact is exposure to CSRF, enabling unauthorized actions on ...