mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-30 18:04:30 +00:00
125 lines
5.5 KiB
JSON
125 lines
5.5 KiB
JSON
{
|
|
"CVE_data_meta": {
|
|
"ASSIGNER": "security@atlassian.com",
|
|
"DATE_PUBLIC": "2018-10-23T00:00:00",
|
|
"ID": "CVE-2018-13401",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "Jira",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_affected": "<",
|
|
"version_value": "7.6.9"
|
|
},
|
|
{
|
|
"version_affected": ">=",
|
|
"version_value": "7.7.0"
|
|
},
|
|
{
|
|
"version_affected": "<",
|
|
"version_value": "7.7.5"
|
|
},
|
|
{
|
|
"version_affected": ">=",
|
|
"version_value": "7.8.0"
|
|
},
|
|
{
|
|
"version_affected": "<",
|
|
"version_value": "7.8.5"
|
|
},
|
|
{
|
|
"version_affected": ">=",
|
|
"version_value": "7.9.0"
|
|
},
|
|
{
|
|
"version_affected": "<",
|
|
"version_value": "7.9.3"
|
|
},
|
|
{
|
|
"version_affected": ">=",
|
|
"version_value": "7.10.0"
|
|
},
|
|
{
|
|
"version_affected": "<",
|
|
"version_value": "7.10.3"
|
|
},
|
|
{
|
|
"version_affected": ">=",
|
|
"version_value": "7.11.0"
|
|
},
|
|
{
|
|
"version_affected": "<",
|
|
"version_value": "7.11.3"
|
|
},
|
|
{
|
|
"version_affected": ">=",
|
|
"version_value": "7.12.0"
|
|
},
|
|
{
|
|
"version_affected": "<",
|
|
"version_value": "7.12.3"
|
|
},
|
|
{
|
|
"version_affected": ">=",
|
|
"version_value": "7.13.0"
|
|
},
|
|
{
|
|
"version_affected": "<",
|
|
"version_value": "7.13.1"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"vendor_name": "Atlassian"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"data_format": "MITRE",
|
|
"data_type": "CVE",
|
|
"data_version": "4.0",
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "The XsrfErrorAction resource in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, from version 7.10.0 before version 7.10.3, from version 7.11.0 before version 7.11.3, from version 7.12.0 before version 7.12.3, and before version 7.13.1 allows remote attackers to obtain a user's Cross-site request forgery (CSRF) token through an open redirect vulnerability."
|
|
}
|
|
]
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "URL Redirection to Untrusted Site ('Open Redirect')"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"name": "105751",
|
|
"refsource": "BID",
|
|
"url": "http://www.securityfocus.com/bid/105751"
|
|
},
|
|
{
|
|
"name": "https://jira.atlassian.com/browse/JRASERVER-68139",
|
|
"refsource": "CONFIRM",
|
|
"url": "https://jira.atlassian.com/browse/JRASERVER-68139"
|
|
}
|
|
]
|
|
}
|
|
} |