CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. It may be remotely exploitable.
CVE
CVE-2018-13401
Severity
MEDIUM
CVSS
6.1
EPSS
1.36%
Original NVD Description
The XsrfErrorAction resource in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, from version 7.10.0 before version 7.10.3, from version 7.11.0 before version 7.11.3, from version 7.12.0 before version 7.12.3, and before version 7.13.1 allows remote attackers to obtain a user's Cross-site request forgery (CSRF) token through an open redirect vulnerability.
Related CVEs
Other vulnerabilities affecting the same vendor(s)