Security Advisory

CVE-2019-14998

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-09-11 13:56:26

Last updated 2024-09-16 22:51:07

Assigner atlassian

State PUBLISHED

Description

The Webwork action Cross-Site Request Forgery (CSRF) protection implementation in Jira before version 8.4.0 allows remote attackers to bypass its protection via "cookie tossing" a CSRF cookie from a subdomain of a Jira instance.

← Browse all CVEs View on cve.org ↗