Unrated severityNVD Advisory· Published Jul 5, 2023· Updated Oct 24, 2024
icingaweb2-module-jira template and field configuration are susceptible to CSRF
CVE-2023-30607
Description
icingaweb2-module-jira provides integration with Atlassian Jira. Starting in version 1.3.0 and prior to version 1.3.2, template and field configuration forms perform the deletion action before user input is validated, including the cross site request forgery token. This issue is fixed in version 1.3.2. There are no known workarounds.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: >=1.3.0,<1.3.2
- Range: >= 1.3.0, < 1.3.2
Patches
Vulnerability mechanics
References
3- github.com/Icinga/icingaweb2-module-jira/commit/7f0c53b7a3e87be2f4c2e8840805d7b7c9762424mitrex_refsource_MISC
- github.com/Icinga/icingaweb2-module-jira/releases/tag/v1.3.2mitrex_refsource_MISC
- github.com/Icinga/icingaweb2-module-jira/security/advisories/GHSA-gh7w-7f7j-gwp5mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.