Lucene search

K
atlassian[email protected]ATLASSIAN:CWD-4883
HistoryMar 21, 2017 - 8:59 p.m.

The bundled Atlassian OAuth plugin allows arbitrary HTTP requests to be proxied - CVE-2017-9506

2017-03-2120:59:01
jira.atlassian.com
54

0.006 Low

EPSS

Percentile

78.1%

The version of the bundled Atlassian OAuth plugin was vulnerable to Server Side Request Forgery (SSRF). This allowed a XSS and or a SSRF attack to be performed. More information about the Atlassian OAuth plugin issue see https://ecosystem.atlassian.net/browse/OAUTH-344 .

0.006 Low

EPSS

Percentile

78.1%