Back to Database
Status published
Medium
CVE-2023-30607
icingaweb2-module-jira template and field configuration are susceptible to CSRF
Vulnerability Description
icingaweb2-module-jira provides integration with Atlassian Jira. Starting in version 1.3.0 and prior to version 1.3.2, template and field configuration forms perform the deletion action before user input is validated, including the cross site request forgery token. This issue is fixed in version 1.3.2. There are no known workarounds.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-30607
Credits & Attribution
No credits recorded in the NVD database.
References
More from Icinga
View All →CVE-2025-61909
Icinga 2 signals sent as root to processes based on PID file written by the Icinga 2 daemon user
Medium
4
CVE-2025-61908
Icinga 2 Denial of Service (DoS) By Dereferencing Invalid Reference
High
7.1
CVE-2025-61907
Icinga 2 API users could access restricted values in filter expressions
High
7.1
CVE-2025-61789
Icinga DB Web hidden/protected custom variables are prone to filter enumeration
Medium
5.3
CVE-2025-53840
Icinga DB Web Exposure of Sensitive Information to an Unauthorized Actor vulnerability
Low
2.4
Affected Vendor
Icinga
View all reports →Affected Software
icingaweb2-module-jira
Vulnerable Versions:
>= 1.3.0, < 1.3.2
Timeline
Official Publish:
July 5th, 2023
Last Modified:
October 24th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L