vulnerability
Atlassian JIRA: URL Redirection to Untrusted Site ('Open Redirect') (CVE-2019-20901)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:N/AC:M/Au:N/C:P/I:P/A:N) | Jul 13, 2020 | Jul 30, 2020 | Aug 11, 2025 |
Severity
6
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:N)
Published
Jul 13, 2020
Added
Jul 30, 2020
Modified
Aug 11, 2025
Description
The login.jsp resource in Jira before version 8.5.2, and from version 8.6.0 before version 8.6.1 allows remote attackers to redirect users to a different website which they may use as part of performing a phishing attack via an open redirect in the os_destination parameter.
Solutions
atlassian-jira-upgrade-8_5_2atlassian-jira-upgrade-8_6_1
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.