Unscored CVE-2019-8447 EUVD-2019-17837GHSA-v6j9-3grc-c9r7

The ServiceExecutor resource in Jira before version 8.3.2 allows remote attackers to trigger the creation of export files via a Cross-site …

Published Aug 23, 2019 · Updated Sep 16, 2024 · Assigned by atlassian

Vendor: Atlassian Product: Jira Category: Web / CMS

Description

The ServiceExecutor resource in Jira before version 8.3.2 allows remote attackers to trigger the creation of export files via a Cross-site request forgery (CSRF) vulnerability.

Affected products

Vendor	Product	Affected	Fixed
Atlassian	Jira	unspecified – < 8.3.2	8.3.2

References

https://jira.atlassian.com/browse/JRASERVER-69776