CVE-2019-11586: CSRF
Published Aug 23, 2019
·Updated
The AddResolution.jspa resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to create new resolutions via a Cross-site request forgery (CSRF) vulnerability.
Affected Software
3 affected components
Atlassian Jira<7.13.6
Atlassian Jira Server>=8.0.0<8.2.3
Atlassian Jira Server>=8.3.0<8.3.2
Event History
Aug 23, 2019
CVE Published
via MITRE·01:49 PM
Data Sourced
via MITRE·01:49 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-11586?
CVE-2019-11586 is rated as a moderate severity vulnerability.
2
How do I fix CVE-2019-11586?
To mitigate CVE-2019-11586, upgrade Jira to version 7.13.6 or versions 8.2.3 and above.
3
What vulnerability does CVE-2019-11586 represent?
CVE-2019-11586 represents a Cross-site request forgery (CSRF) vulnerability that allows remote attackers to create new resolutions.
4
Which versions of Jira are affected by CVE-2019-11586?
Jira versions prior to 7.13.6, from 8.0.0 before 8.2.3, and from 8.3.0 before 8.3.2 are affected by CVE-2019-11586.
5
Is CVE-2019-11586 specific to a certain edition of Jira?
CVE-2019-11586 affects both Atlassian Jira and Jira Server products.