Lucene search

PRIOn knowledge basePRION:CVE-2024-23319

HistoryFeb 09, 2024 - 3:15 p.m.

Cross site request forgery (csrf)

2024-02-0915:15:00

PRIOn knowledge base

www.prio-n.com

cross site request forgery

mattermost

jira plugin

logout

attacker

crafted message

user's jira connection

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.3%

JSON

Mattermost Jira Plugin fails to protect against logout CSRF allowing an attacker to post a specially crafted message that would disconnect a user’s Jira connection in Mattermost only by viewing the message.

CPENameOperatorVersion
mattermost_serverle8.1.7

CPE	Name	Operator	Version
	mattermost_server	le	8.1.7

References

mattermost.com/security-updates