CVE-2019-20415

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Atlassian Jira Server and Data Center in affected versions allows remote attackers to modify logging and profiling settings via a cross-site request forgery (CSRF) vulnerability. The affected versions are before version 7.13.3, and from version 8.0.0 before 8.1.0.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-352

Affected software

Vendor	Product	Versions
Atlassian	Jira Server	>= unspecified, < 7.13.3; >= 8.0.0, < unspecified; >= unspecified, < 8.1.0

References

https://jira.atlassian.com/browse/JRASERVER-70849Issue Tracking, Vendor Advisory
https://jira.atlassian.com/browse/JRASERVER-70849Issue Tracking, Vendor Advisory

Timeline

Published: Jun 30, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-204164.8Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site sc CVE-2019-204186.5Affected versions of Atlassian Jira Server and Data Center allow remote attackers to prevent users from accessing the instance via an Applic CVE-2019-204197.8Affected versions of Atlassian Jira Server and Data Center allow remote attackers to execute arbitrary code via a DLL hijacking vulnerabilit CVE-2019-204217.5In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU consumptio CVE-2019-204225.5In the Linux kernel before 5.3.4, fib6_rule_lookup in net/ipv6/ip6_fib.c mishandles the RT6_LOOKUP_F_DST_NOREF flag in a reference-count dec CVE-2019-204237.5In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic due to the lack of validation for specific fields CVE-2019-204247.5In the Lustre file system before 2.12.3, mdt_object_remote in the mdt module has a NULL pointer dereference and panic due to the lack of val CVE-2019-204257.5In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of validation for specific CVE-2019-204267.5In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds access and panic due to the lack of validation for specific CVE-2019-204279.8In the Lustre file system before 2.12.3, the ptlrpc module has a buffer overflow and panic, and possibly remote code execution, due to the l CVE-2019-204287.5In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic due to the lack of validation for specific fi CVE-2019-204297.5In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic (via a modified lm_bufcount field) due to the