| Package | Affected versions | Patched versions |
|---|---|---|
| data center | < 8.16.0 | 8.16.0 |
| jira | < 8.16.0 | 8.16.0 |
The Cross-Site Request Forgery (CSRF) failure retry feature of Atlassian Jira Server and Data Center before version 8.16.0 allows remote attackers who are able to trick a user into retrying a request to bypass CSRF protection and replay a crafted request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free