The WorkflowResource class removeStatus method in Jira before version 7.13.12, from version 8.0.0 before version 8.4.3, and from version 8.5.0 before version 8.5.2 allows authenticated remote attackers who do not have project administration access to remove a configured issue status from a project via a missing authorisation check.
Metrics
Affected Vendors & Products
Advisories
Source | ID | Title |
---|---|---|
![]() |
EUVD-2019-6100 | The WorkflowResource class removeStatus method in Jira before version 7.13.12, from version 8.0.0 before version 8.4.3, and from version 8.5.0 before version 8.5.2 allows authenticated remote attackers who do not have project administration access to remove a configured issue status from a project via a missing authorisation check. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
Link | Providers |
---|---|
https://jira.atlassian.com/browse/JRASERVER-70405 |
![]() ![]() |
History
No history.

Status: PUBLISHED
Assigner: atlassian
Published:
Updated: 2024-09-16T16:57:38.126Z
Reserved: 2019-08-13T00:00:00
Link: CVE-2019-15013

No data.

Status : Modified
Published: 2019-12-18T04:15:14.197
Modified: 2024-11-21T04:27:52.437
Link: CVE-2019-15013

No data.

No data.