Unrated severityNVD Advisory· Published Feb 12, 2020· Updated Sep 16, 2024
CVE-2019-20098
CVE-2019-20098
Description
The VerifySmtpServerConnection!add.jspa component in Atlassian Jira Server and Data Center before version 8.7.0 is vulnerable to cross-site request forgery (CSRF). An attacker could exploit this by tricking an administrative user into making malicious HTTP requests, allowing the attacker to enumerate hosts and open ports on the internal network where Jira server is present.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<8.7.0+ 1 more
- (no CPE)range: <8.7.0
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
2- jira.atlassian.com/browse/JRASERVER-70605mitrex_refsource_MISC
- www.tenable.com/security/research/tra-2020-05mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.