Skip to content
CVE PROGRAM SOURCE RECORD5.0 Medium

CVE-2023-30607

icingaweb2-module-jira template and field configuration are susceptible to CSRF

Description

icingaweb2-module-jira provides integration with Atlassian Jira. Starting in version 1.3.0 and prior to version 1.3.2, template and field configuration forms perform the deletion action before user input is validated, including the cross site request forgery token. This issue is fixed in version 1.3.2. There are no known workarounds.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Icinga icingaweb2-module-jira

  • >= 1.3.0, < 1.3.2affected

References