Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-67vg-8r27-8fjh

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The Cross-Site Request Forgery (CSRF) failure retry feature of Atlassian Jira Server and Data Center before version 8.16.0 allows remote attackers who are able to trick a user into retrying a request to bypass CSRF protection and replay a crafted request.

The Cross-Site Request Forgery (CSRF) failure retry feature of Atlassian Jira Server and Data Center before version 8.16.0 allows remote attackers who are able to trick a user into retrying a request to bypass CSRF protection and replay a crafted request.

EPSS

Процентиль: 50%
0.00271
Низкий

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 4.3
nvd
почти 4 года назад

The Cross-Site Request Forgery (CSRF) failure retry feature of Atlassian Jira Server and Data Center before version 8.16.0 allows remote attackers who are able to trick a user into retrying a request to bypass CSRF protection and replay a crafted request.

EPSS

Процентиль: 50%
0.00271
Низкий

Дефекты

CWE-352