virus logo FortiClient Vulnerability

Atlassian Jira Software Server CVE-2019-14998 Cross Site Request Forgery Vulnerability

description-logoDescription

The Webwork action Cross-Site Request Forgery (CSRF) protection implementation in Jira before version 8.4.0 allows remote attackers to bypass its protection via \"cookie tossing\" a CSRF cookie from a subdomain of a Jira instance.

affected-products-logoAffected Applications

Jira Software Server

CVE References

CVE-2019-14998

Other References

https://jira.atlassian.com/projects/JRASERVER/issues/
ID 74290
Created Dec 20, 2022
Description
Updated		 Dec 14, 2023
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon lightgray-background-circle-icon
Coverage FortiClient
OS Windows
Vendor Atlassian
Patch manual
Application Jira Software Server