Cross-Site Request Forgery Vulnerability in Atlassian Application Links Plugin

CVE-2019-20100

Summary

The Atlassian Application Links plugin has a vulnerability that allows for cross-site request forgery (CSRF) attacks, affecting various versions of the plugin and its integration with Jira Server and Data Center. An attacker could potentially exploit the vulnerability by tricking an authorized administrator into submitting a malicious HTTP request. This could enable the attacker to access sensitive information, manage hosts, and open ports within the internal network where the Jira Server is deployed, thereby compromising the integrity and confidentiality of the environment.

References