Junglewise Threat Intelligence

CVE-2024-23319: GO-2024-2539 - Cross-site request forgery via logout button in github.com/mattermost/mattermost-plugin-jira

CVE-2024-23319 · Severity: low · CVSS 3.1 · Published 2024-03-18

Technologies: github.com/mattermost/mattermost-plugin-jira (Go). Vendors: Go.

Executive brief

Cross-site request forgery via logout button in github.com/mattermost/mattermost-plugin-jira

Affected products

Go github.com/mattermost/mattermost-plugin-jira

Related threats

GO-2026-4275 - Mattermost with Jira plugin enabled has Incorrect Implementation of Authentication Algorithm in github.com/mattermost/mattermost-plugin-jira
GO-2024-2540 - Mattermost Jira Plugin does not properly check security levels in github.com/mattermost/mattermost-plugin-jira