CVE-2019-14999

CVE-2019-14999: vulnerability in Atlassian Universal Plugin Manager

Published · Updated

Follow this CVE+ Monitor Universal Plugin Manager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.6%
The Uninstall REST endpoint in Atlassian Universal Plugin Manager before version 2.22.19, from version 3.0.0 before version 3.0.3 and from version 4.0.0 before version 4.0.3 allows remote attackers to uninstall plugins using a Cross-Site Request Forgery (CSRF) vulnerability on an authenticated administrator.
Affected products
Atlassian · Universal Plugin Manager
Related CVEs — Atlassian Universal Plugin Manager

In the same product, most dangerous first.

CVE-2018-20233—CVE-2018-20233EPSS 1.8%CVE-2018-5229—CVE-2018-5229EPSS 0.6%