Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2022-26135

🗓️ 30 Jun 2022 05:20:15Reported by atlassianType 
cve
 cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 158 Views🌐 WEB

A vulnerability in Mobile Plugin for Jira Data Center and Server allows remote, authenticated users to perform a full read server-side request forgery via a batch endpoint

Related
Detection
Affected
Refs
Paths
Social
ReporterTitlePublishedViews
Family
GithubExploit		Exploit for Server-Side Request Forgery in Atlassian Jira_Data_Center
24 Jun 202207:55
–githubexploit
ATTACKERKB		CVE-2022-26135
29 Jun 202200:00
–attackerkb
BDU FSTEC		The vulnerability of the mobile plugin for data processing in Atlassian Jira Server and Data Center allows a perpetrator to execute an SSRF attack.
11 Jul 202200:00
–bdu_fstec
Circl		CVE-2022-26135
30 Jun 202207:45
–circl
CNNVD		Atlassian Jira Server 代码问题漏洞
30 Jun 202200:00
–cnnvd
CNVD		Atlassian Jira Server and Data Center Server-side Request Forgery Vulnerability
1 Jul 202200:00
–cnvd
Check Point Advisories		Atlassian Jira Server-Side Request Forgery (CVE-2022-26135)
13 Nov 202200:00
–checkpoint_advisories
Cvelist		CVE-2022-26135
30 Jun 202205:20
–cvelist
Tenable Nessus		Atlassian Jira 8.0.x < 8.13.22 / 8.20.x < 8.20.10 / 8.22.x < 8.22.4 (JRASERVER-73863)
6 Jul 202200:00
–nessus
Tenable Nessus		Atlassian Jira 8.0.x < 8.13.22 Server-Side Request Forgery
8 Jul 202200:00
–nessus
Rows per page
NVD
Node
atlassianjira_data_centerRange8.0.0–8.13.22
OR
atlassianjira_data_centerRange8.14.0–8.20.10
OR
atlassianjira_data_centerRange8.21.0–8.22.4
OR
atlassianjira_serverRange8.0.0–8.13.22
OR
atlassianjira_serverRange8.14.0–8.20.10
OR
atlassianjira_serverRange8.21.0–8.22.4
OR
atlassianjira_service_deskRange4.0.0–4.13.22data_center
OR
atlassianjira_service_deskRange4.0.0–4.13.22server
OR
atlassianjira_service_managementRange4.14.0–4.20.10data_center
OR
atlassianjira_service_managementRange4.14.0–4.20.10server
OR
atlassianjira_service_managementRange4.21.0–4.22.4data_center
OR
atlassianjira_service_managementRange4.21.0–4.22.4server
[
  {
    "product": "Jira Core Server",
    "vendor": "Atlassian",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "8.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "8.13.22",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "8.14.0",
        "versionType": "custom"
      },
      {
        "lessThan": "8.20.10",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "8.21.0",
        "versionType": "custom"
      },
      {
        "lessThan": "8.22.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Jira Software Server",
    "vendor": "Atlassian",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "8.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "8.13.22",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "8.14.0",
        "versionType": "custom"
      },
      {
        "lessThan": "8.20.10",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "8.21.0",
        "versionType": "custom"
      },
      {
        "lessThan": "8.22.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Jira Software Data Center",
    "vendor": "Atlassian",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "8.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "8.13.22",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "8.14.0",
        "versionType": "custom"
      },
      {
        "lessThan": "8.20.10",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "8.21.0",
        "versionType": "custom"
      },
      {
        "lessThan": "8.22.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Jira Service Management Server",
    "vendor": "Atlassian",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "4.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.13.22",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "4.14.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.20.10",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "4.21.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.22.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Jira Service Management Data Center",
    "vendor": "Atlassian",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "4.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.13.22",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "4.14.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.20.10",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "4.21.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.22.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
requestsrequest body/rest/nativemobile/1.0/batchBatch endpoint vulnerable to SSRF when authenticated users issue a batch request to retrieve arbitrary resources.CWE-918
methodrequest body/rest/nativemobile/1.0/batchBatch endpoint vulnerable to SSRF when authenticated users issue a batch request to retrieve arbitrary resources.CWE-918
locationrequest body/rest/nativemobile/1.0/batchBatch endpoint vulnerable to SSRF when authenticated users issue a batch request to retrieve arbitrary resources.CWE-918

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 04:34Current
6.2Medium risk
Vulners AI Score6.2
CVSS 24
CVSS 3.16.5
EPSS0.71169
SSVC
CWE-918
cve-2022-26135vulnerabilitymobile pluginjiradata centerserverserver-side request forgeryauthenticationatlassian jira
158