CVE-2019-20415

—

CVSS 3.1

4.3 medium

EPSS

<1%p48

Published

Jun 30, 2020 (Jun 30, 2020)

Modified

Jun 17, 2026

Description

Atlassian Jira Server and Data Center in affected versions allows remote attackers to modify logging and profiling settings via a cross-site request forgery (CSRF) vulnerability. The affected versions are before version 7.13.3, and from version 8.0.0 before 8.1.0.

Vendors: atlassian
Products: jira, jira data center, jira server, jira software data center
Weakness: CWE-352
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.