CVE-2020-36232

creationtimestamp| type| source ---|---|--- 2021-02-23 00:33:57+00:00| seen| https://t.me/cibsecurity/23956...

CVE-2020-36232

CVE-2020-36232 affects the atlassian-gadgets plugin used by Atlassian Jira Server/Data Center. The vulnerability arises from MessageBundleWhiteList handling that allowed unexpected DNS lookups and requests to arbitrary services by obtaining the application base URL from the executing HTTP request...

Jira bundles a vulnerable version of atlassian-gadgets - CVE-2020-36232

The atlassian-gadgets plugin used in affected versions of Atlassian Jira Server and Data Center allows unexpected DNS lookups and requests to malicious servers via server side request forgery vulnerability. The affected versions are before version 8.5.10, from version 8.6.0 before version 8.13.2,...