CVE-2016-4319

Atlassian JIRA Server before 7.1.9 has CSRF in auditing/settings.