Description
Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to create, edit, or delete Jira tickets for vulnerabilities in other projects
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CervantesSec | cervantes | alpha 0.3 – ≤ 1.3-beta | v.1.4.0-beta |