PT-2025-6281 · Atlassian · Jira

David Black · Published 2019-05-14 · Updated 2025-02-11 · CVE-2019-15002

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Atlassian Jira versions 7.6.4 through 8.1.0

Description: A CSRF issue exists due to the login form not requiring a CSRF token. This allows an attacker to log a user into the system under an unexpected account.

Recommendations: For Atlassian Jira versions 7.6.4 through 8.1.0, update to a version that includes a fix for this issue to prevent CSRF attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

BDU:2025-08206

CVE-2019-15002

Affected Products

Jira

References · 7

• https://jira.atlassian.com/browse/JRASERVER-67979 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-08206 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-15002 · Security Note
• https://osv.dev/vulnerability/CVE-2019-15002 · Vendor Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0834 · Note
• https://github.com/advisories/ghsa-q799-96gw-fjvp · Note
• https://cybersecurity-help.cz/vdb/SB2019091709 · Note