CVE-2019-14999

The Uninstall REST endpoint in Atlassian Universal Plugin Manager before version 2.22.19, from version 3.0.0 before version 3.0.3 and from version 4.0.0 before…

published August 23, 2019

CVSS
—
EPSS
1%
Percentile
45.5
In the wild
Unconfirmed
What it is

The Uninstall REST endpoint in Atlassian Universal Plugin Manager before version 2.22.19, from version 3.0.0 before version 3.0.3 and from version 4.0.0 before version 4.0.3 allows remote attackers to uninstall plugins using a Cross-Site Request Forgery (CSRF) vulnerability on an authenticated administrator.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00555 · 45.5th percentile
Published
2019-08-23T13:49Z
EPSS history
Timeline
  • 23 AUG 13:49Z
    The Uninstall REST endpoint in Atlassian Universal Plugin Manager before version 2.22.19, from version 3.0.0 before version 3.0.3 and from version 4.0.0 before…
    cvelistv5