Broken access control in JiraController

Summary

Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to create, edit, or delete Jira tickets for vulnerabilities in other projects

Remediation

1. Inventory every CervantesSec cervantes deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

• Patchhttps://www.grayback.es/advisories
• Patchhttps://www.grayback.es/en/advisories