Medium severity5.0NVD Advisory· Published Jul 5, 2023· Updated Jun 17, 2026

CVE-2023-30607

Description

icingaweb2-module-jira provides integration with Atlassian Jira. Starting in version 1.3.0 and prior to version 1.3.2, template and field configuration forms perform the deletion action before user input is validated, including the cross site request forgery token. This issue is fixed in version 1.3.2. There are no known workarounds.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Icinga/Icinga Web Jira Integration
cpe:2.3:a:icinga:icinga_web_jira_integration:*:*:*:*:*:*:*:*
Range: >=1.3.0,<1.3.2
Icinga/Icingaweb2 Module Directorllm-fuzzy
Range: >=1.3.0,<1.3.2
Icinga/Icingaweb2 Module Reportingcpe-rescue
Range: >= 1.3.0, < 1.3.2

Patches

Vulnerability mechanics

References

github.com/Icinga/icingaweb2-module-jira/commit/7f0c53b7a3e87be2f4c2e8840805d7b7c9762424nvdPatch
github.com/Icinga/icingaweb2-module-jira/security/advisories/GHSA-gh7w-7f7j-gwp5nvdVendor Advisory
github.com/Icinga/icingaweb2-module-jira/releases/tag/v1.3.2nvdRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.325
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000