Lucene search
Security-metrics-botATLASSIAN:JRASERVER-66642HistoryJan 17, 2018 - 2:15 a.m.
Server Side Request Forgery(SSRF) in the Jira Trello importer - CVE-2017-16865
2018-01-1702:15:50
security-metrics-bot
jira.atlassian.com
82
0.001 Low
EPSS
Percentile
48.9%
The Trello importer in Atlassian Jira before version 7.6.1 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery (SSRF). When running in an environment like Amazon EC2, this flaw maybe used to access to a metadata resource that provides access credentials and other potentially confidential information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jira server and data center | lt | 7.6.1 | |
| jira server and data center | le | 7.4.2 | |
| jira server and data center | lt | 7.7.0 |
Related
prion
prion
Server side request forgery (ssrf)
2018-01-17 14:29:00
cvelist
cvelist
CVE-2017-16865
2018-01-16 00:00:00
nvd
nvd
CVE-2017-16865
2018-01-17 14:29:00
atlassian
atlassian
cve
cve
CVE-2017-16865
2018-01-17 14:29:00
nessus
nessus
Atlassian JIRA < 7.6.1 Multiple Vulnerabilities
2019-03-05 00:00:00