CVE-2019-11589

MEDIUM

Jira <7.13.6, <8.0.0-<8.2.3, <8.3.0-<8.3.2 - Open Redirect

Title source: llm
STIX 2.1

Description

The ChangeSharedFilterOwner resource in Jira before version 7.13.6, from version 8.0.0 before version 8.2.3, and from version 8.3.0 before version 8.3.2 allows remote attackers to attack users, in some cases be able to obtain a user's Cross-site request forgery (CSRF) token, via a open redirect vulnerability.

References (1)

Core 1
Core References
Issue Tracking, Vendor Advisory x_refsource_misc
https://jira.atlassian.com/browse/JRASERVER-69780

Scores

CVSS v3 6.1
EPSS 0.0017
EPSS Percentile 38.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-601
Status published
Products (1)
atlassian/jira_server 7.13.0 - 7.13.6
Published Aug 23, 2019
Tracked Since Feb 18, 2026