CVE-2019-20099

CVE-2019-20099 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Atlassian Jira Server and Data Center versions prior to 8.7.0. This flaw allows an attacker to trick an administrative user into making malicious HTTP requests, enabling the enumeration of hosts and open ports on the internal network where Jira is deployed. Rated as Medium severity (CVSS 4.3), its attack vector is network-based with low complexity, requiring user interaction but resulting in low confidentiality impact and no integrity or availability impact. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.