CVE-2024-23319 — CSRF issue allows disconnecting a user's Jira connection through a simple post message (Jira Plugin)
Mattermost Jira Plugin fails to protect against logout CSRF allowing an attacker to post a specially crafted message that would disconnect a user's Jira connection in Mattermost…
Published: 2024-02-09 · CVSS: 3.5 · CVSS 3.1
Mattermost Jira Plugin fails to protect against logout CSRF allowing an attacker to post a specially crafted message that would disconnect a user's Jira connection in Mattermost only by viewing the message.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7