CVE-2023-30607

ALTO 8.8CVE-2023-30607 · Published 05/07/2023 · updated 17/06/2026

In breve

CVE-2023-30607 è una vulnerabilità ALTO (CVSS 8.8) che riguarda icinga web jira integration (icinga).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.26%, superiore al 18.1% delle vulnerabilità.
Correzione: aggiornare a 1.3.2 o successiva.

Package	Affected versions	Patched versions
icinga web jira integration icinga	`≥ 1.3.0, < 1.3.2`	`1.3.2`

Description

icingaweb2-module-jira provides integration with Atlassian Jira. Starting in version 1.3.0 and prior to version 1.3.2, template and field configuration forms perform the deletion action before user input is validated, including the cross site request forgery token. This issue is fixed in version 1.3.2. There are no known workarounds.

References

Icinga/icingaweb2-module-jira commit 7f0c53b · Patch
Icinga/icingaweb2-module-jira release v1.3.2 · Release Notes
Icinga/icingaweb2-module-jira security advisory · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free