HackerOne · Report #226418

HackerOne reports escalation to JIRA is CSRF vulnerable

Validstatus

mediumseverity

$500bounty

36upvotes

30 Aug 2017disclosed

How it was found

Summary:

HackerOne reports escalation to JIRA is CSRF vulnerable

Description (Include Impact):

An attacker can steal private reports details through a CSRF in HackerOne report escalation to JIRA implementation.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original