CVE-2024-23319

published 2024-02-09

CVE-2024-23319: Mattermost Jira Plugin fails to protect against logout CSRF allowing an attacker to post a specially crafted message that would disconnect a user's Jira…

low 3.5 CVSS 3.1

AV N AC L PR L UI R S U C N I N A L

Mattermost Jira Plugin fails to protect against logout CSRF allowing an attacker to post a specially crafted message that would disconnect a user's Jira connection in Mattermost only by viewing the message.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
github.com	mattermost_mattermost-plugin-jira	>= 0 < 1.1.2-0.20230830170046-f4cf4c6de017	1.1.2-0.20230830170046-f4cf4c6de017
mattermost	mattermost	<= 8.1.7	—
mattermost	mattermost_server	<= 8.1.7	—

CWE-352