CVE-2019-15013

CVE-2019-15013: vulnerability in Atlassian Jira

Published · Updated

Follow this CVE+ Monitor Jira

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.2%
The WorkflowResource class removeStatus method in Jira before version 7.13.12, from version 8.0.0 before version 8.4.3, and from version 8.5.0 before version 8.5.2 allows authenticated remote attackers who do not have project administration access to remove a configured issue status from a project via a missing authorisation check.
Affected products
Atlassian · Jira
Related CVEs — Atlassian Jira

In the same product, most dangerous first.

CVE-2019-8451—CVE-2019-8451EPSS 94.5%CVE-2019-8449—CVE-2019-8449EPSS 85.7%CVE-2019-8442—CVE-2019-8442EPSS 59.8%CVE-2019-3403—CVE-2019-3403EPSS 53.6%CVE-2018-20824—CVE-2018-20824EPSS 38.0%CVE-2018-5230—CVE-2018-5230EPSS 37.0%