Medium severity4.3NVD Advisory· Published Jun 30, 2020· Updated Jun 17, 2026

CVE-2019-20415

Description

Atlassian Jira Server and Data Center in affected versions allows remote attackers to modify logging and profiling settings via a cross-site request forgery (CSRF) vulnerability. The affected versions are before version 7.13.3, and from version 8.0.0 before 8.1.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Atlassian/Jira
cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*
Range: <7.13.3
Atlassian/Jira Data Center
cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*
Range: >=8.0.0,<8.1.0
Atlassian/Jira Server2 versions
cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*range: >=8.0.0,<8.1.0
- (no CPE)range: unspecified
Atlassian/Jira Software Data Center
cpe:2.3:a:atlassian:jira_software_data_center:*:*:*:*:*:*:*:*
Range: <7.13.3
Atlassian/Crowd Data Center and Serverllm-fuzzy
Range: <7.13.3, >=8.0.0 <8.1.0

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2019-20415

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions