Cross-site request forgery (CSRF) vulnerability in Atlassian JIRA Enterprise Edition 3.13 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Link | Tags |
---|---|
https://exchange.xforce.ibmcloud.com/vulnerabilities/46169 | vdb entry |
http://www.securityfocus.com/bid/31967 | vdb entry |
http://osvdb.org/49417 | vdb entry |
http://secunia.com/advisories/32113 | third party advisory vendor advisory |