Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
added 2026/09/22 8:36 p.m.6 views

MCP Atlassian: Arbitrary server-local file upload to Jira/Confluence attachments via unrestricted file_path parameters

Summary The Jira and Confluence attachment upload tools accept caller-controlled file path parameters and read those paths from the MCP server's local filesystem before uploading the file as an Atlassian attachment. In local stdio deployments, this can expose files readable by the user's MCP...

8.3CVSS6AI score0.00466EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder