The WorkflowResource class removeStatus method in Jira before version 7.13.12, from version 8.0.0 before version 8.4.3, and from version 8.5.0 before version 8.5.2 allows authenticated remote attackers who do not have project administration access to remove a configured issue status from a project via a missing authorisation check.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://jira.atlassian.com/browse/JRASERVER-70405 |
![]() ![]() |
History
No history.

Status: PUBLISHED
Assigner: atlassian
Published: 2019-12-18T03:30:12.315609Z
Updated: 2024-09-16T16:57:38.126Z
Reserved: 2019-08-13T00:00:00
Link: CVE-2019-15013

No data.

Status : Modified
Published: 2019-12-18T04:15:14.197
Modified: 2024-11-21T04:27:52.437
Link: CVE-2019-15013

No data.