← CVE Intelligence

CVE-2024-23319

CSRF issue allows disconnecting a user's Jira connection through a simple post message (Jira Plugin) PUBLISHED

Description (CNA)

Mattermost Jira Plugin fails to protect against logout CSRF allowing an attacker to post a specially crafted message that would disconnect a user's Jira connection in Mattermost only by viewing the message.

Affected (CNA)

Vendor / productVersions
Mattermost / Mattermostaffected 0 through 8.1.7; unaffected 8.1.8

CWE

CWE-352

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.