CVE-2019-11587: CSRF
Various exposed resources of the ViewLogging class in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allow remote attackers to modify various settings via Cross-site request forgery (CSRF).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-11587?
CVE-2019-11587 has been classified with a medium severity, as it allows CSRF attacks which can lead to unauthorized modifications.
How do I fix CVE-2019-11587?
To fix CVE-2019-11587, upgrade Jira to version 7.13.6 or later, or 8.2.3 or later, and ensure your server is configured to properly mitigate CSRF risks.
What versions of Jira are affected by CVE-2019-11587?
CVE-2019-11587 affects Jira versions prior to 7.13.6, and from 8.0.0 before 8.2.3 and from 8.3.0 before 8.3.2.
What type of attack is associated with CVE-2019-11587?
CVE-2019-11587 is associated with Cross-site request forgery (CSRF) attacks.
Can CVE-2019-11587 allow attackers to change settings in Jira?
Yes, CVE-2019-11587 allows remote attackers to modify various settings in Jira through CSRF.