Lucene search
K

CVE-2019-20408

šŸ—“ļøĀ 01 Jul 2020Ā 01:35:24Reported byĀ atlassianTypeĀ 
cve
Ā cve
šŸ”—Ā web.nvd.nist.govšŸ‘Ā 69Ā Views🌐 WEB

The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.7.0 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery (SSRF) vulnerability

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
Atlassian
SSRF in Dashboard & Gadgets - CVE-2019-20408
19 Jun 202001:56
–atlassian
Atlassian
SSRF in Dashboard & Gadgets - CVE-2019-20408
19 Jun 202001:56
–atlassian
Circl
CVE-2019-20408
1 Jul 202008:55
–circl
CNVD
Atlassian Jira Server-Side Request Forgery Vulnerability
2 Jul 202000:00
–cnvd
Cvelist
CVE-2019-20408
1 Jul 202001:35
–cvelist
EUVD
EUVD-2019-10957
7 Oct 202500:30
–euvd
Tenable Nessus
Atlassian JIRA < 8.7.0 SSRF (JRASERVER-71204)
9 Jul 202000:00
–nessus
Tenable Nessus
Atlassian Jira < 8.7.0
14 Mar 202300:00
–nessus
NVD
CVE-2019-20408
1 Jul 202002:15
–nvd
Prion
Server side request forgery (ssrf)
1 Jul 202002:15
–prion
Rows per page
NVD
Node
atlassianjiraRange<8.7.0
[
  {
    "product": "Jira Server",
    "vendor": "Atlassian",
    "versions": [
      {
        "lessThan": "8.7.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
urlrequest body/plugins/servlet/gadgets/makeRequestServer-Side Request Forgery (SSRF) in Jira before 8.7.0 via /plugins/servlet/gadgets/makeRequest allowing access to internal network resources.CWE-918

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 04:38Current
5.2Medium risk
Vulners AI Score5.2
CVSS 25
CVSS 3.15.3
EPSS0.00237
69