Approved changes feed: RSS · Atom

cpe:2.3:a:icinga:icingaweb2-module-jira:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIcinga (f3c2076d-deab-53f8-8d1d-6154f519c3cc)
ProductIcingaweb2 Module Jira (07bd6d6b-a0ce-501f-925b-ca955417bc25)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-30607 vulnerable 2026-06-03 14:51:52.825563 icingaweb2-module-jira template and field configuration are susceptible to CSRF
MEDIUM (5)
icingaweb2-module-jira provides integration with Atlassian Jira. Starting in version 1.3.0 and prior to version 1.3.2, template and field configuration forms perform the deletion action before user input is validated, including the cross site request forgery token. This issue is fixed in version 1.3.2. There are no known workarounds.
Published: 2023-07-05T17:42:54.496Z
Updated: 2024-10-24T19:06:17.105Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.