Lucene search
K

6 matches found

Circl
Circl
added 2020/07/01 8:55 a.m.1 views

CVE-2019-20408

creationtimestamp| type| source ---|---|--- 2020-07-01 08:55:15+00:00| seen| https://t.me/cibsecurity/13157 2020-07-01 13:55:29+00:00| seen| https://t.me/cibsecurity/13167 2020-07-01 16:55:05+00:00| seen| https://t.me/cibsecurity/13185...

5.3CVSS5.5AI score0.00998EPSS
Exploits0References3
OSV
OSV
added 2020/07/01 2:15 a.m.4 views

CVE-2019-20408

The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.7.0 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery SSRF vulnerability due to a logic bug in the JiraWhitelist class...

5.3CVSS6.1AI score
Exploits0References1
NVD
NVD
added 2020/07/01 2:15 a.m.13 views

CVE-2019-20408

The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.7.0 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery SSRF vulnerability due to a logic bug in the JiraWhitelist class...

5.3CVSS0.00998EPSS
Exploits0References1
CVE
CVE
added 2020/07/01 1:35 a.m.71 views

CVE-2019-20408

The CVE-2019-20408 vulnerability affects Atlassian Jira prior to version 8.7.0. A logic bug in the JiraWhitelist class in the /plugins/servlet/gadgets/makeRequest resource allows unauthenticated remote attackers to perform Server-Side Request Forgery (SSRF) and access internal network resources. ...

5.3CVSS5.2AI score0.00998EPSS
Exploits0References1Affected Software1
Atlassian
Atlassian
added 2020/06/19 1:56 a.m.62 views

SSRF in Dashboard & Gadgets - CVE-2019-20408

The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.7.0 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery SSRF vulnerability due to a logic bug in the JiraWhitelist class. As an example to indicate impact, when...

5.3CVSS4.8AI score0.00998EPSS
Exploits0Affected Software1
Atlassian
Atlassian
added 2020/06/19 1:56 a.m.42 views

SSRF in Dashboard & Gadgets - CVE-2019-20408

The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.7.0 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery SSRF vulnerability due to a logic bug in the JiraWhitelist class. As an example to indicate impact, when...

5.3CVSS4.8AI score0.00998EPSS
Exploits0
Rows per page
Query Builder