852 matches found
jira-mobile-ssrf-exploit
CVE-2022-26135 - Full-Read Server Side Request Forgery في Mobile Plugin لـ Jira Data Center و Server حول Assetnote تقوم Assetnote تلقائيًا بتعيين أصولك الخارجية ومراقبتها بحثًا عن التغييرات والمشكلات الأمنية للمساعدة في منع الاختراقات الخطيرة. تم إجراء هذا البحث بواسطة فريق أبحاث الأمن في...
JIRA Workflow Designer Plugin in Atlassian JIRA Server > 6.3.0 - Remote Code Execution (XXE)
The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote attackers to execute arbitrary code, read arbitrary files, or cause a denial of service via a crafted serialized Java object. id: CVE-2017-5983 info: name:...
CVE-2020-14179
CVE-2020-14179 كشف بيانات حساسة عبر نقطة النهاية /secure/QueryComponent!Default.jspa الأولوية: عالية الإصدارات المتأثرة: 8.6.0 | 8.8.0 | 8.5.5 | 8.9.0 | 8.10.0 | 8.11.0 تسمح الإصدارات المتأثرة من Atlassian Jira Server و Data Center للمهاجمين البعيدين غير المصادق عليهم بعرض أسماء الحقول المخصصة...
Jira-CVE-2019-8451
إثبات المفهوم لـ Jira CVE-2019-8451 الوصف فحص إثبات المفهوم للتحقق مما إذا كان مضيف Jira عرضة لـ CVE-2019-8451 CVE-2019-8451 CVE-2019-8451 هي ثغرة تزوير طلب من جانب الخادم SSRF قبل المصادقة موجودة في المورد /plugins/servlet/gadgets/makeRequest. تم إدخال هذه الثغرة في إصدار Jira Server 7.6.0، وتم...
CVE-2019-8451
CVE-2019-8451 https://jira.atlassian.com/browse/JRASERVER-69793 http://host:port/plugins/servlet/gadgets/makeRequest?url=http://:@'.formathost, port, target https://host:port/plugins/servlet/gadgets/makeRequest?url=https://:@'.formathost, port, target...
CVE-2021-26086
CVE-2021-26086 Atlassian Jira Server/Data Center 8.4.0 - قراءة/تضمين محدود للملفات عن بُعد النقاط الضعيفة القابلة للاستغلال: WEB-INF/web.xml WEB-INF/decorators.xml WEB-INF/classes/seraph-config.xml META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties...
Prototype Pollution axios Dependency in Jira Software Data Center and Server
This is a vulnerability in a non-Atlassian dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity Prototype Pollution vulnerability was introduced in versions 10.3.0 and 11.3.0 of Jira Software Data Center and Server. This...
HTTP Request Smuggling io.netty:netty-codec-http Dependency in Jira Software Data Center
This is a vulnerability in a non-Atlassian Jira Software dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity Injection vulnerability was introduced in versions 9.12.1, 9.16.0, 9.17.0, 10.0.0, 10.1.1, 10.2.0, 10.3.0, 10.4.0,...
HTTP Request Smuggling io.netty:netty-codec-http Dependency in Jira Software Data Center
This is a vulnerability in a non-Atlassian Jira dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This High severity HTTP Request Smuggling vulnerability was introduced in versions 9.12.1, 10.3.0, 11.3.0 of Jira Software Data Center and Jira...
DoS (Denial of Service) ansi-regex Dependency in Jira Software Data Center and Server
This High severity DoS Denial of Service vulnerability was introduced in version 9.15.2, 9.16.0, 9.17.0, 10.1.1, 10.3.13, 11.2.0 of Jira Software Data Center and Server. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of code:java...
Mattermost 安全漏洞
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability in Mattermost versions 11.1.0 and prior to 11.1.x, 11.0.5 and prior to 11.0.x, 10.12.3 and prior to 10.12.x, and 10.11.7 and prior to 10.11.x, which stems from the Jira plugin'...
XXE (XML External Entity Injection) Tika Dependency in Jira Software Data Center and Server
This Jira Software release includes updates to our Apache Tika dependency in response to CVE-2025-66516. Our security team has assessed that the current scope of this CVE does not present the same critical risk in our products, as our use of the dependency doesn’t support the known path for...
DoS (Denial of Service) software.amazon.ion:ion-java Dependency in Jira Software Data Center and Server
This High severity DoS Denial of Service vulnerability known as CVE-2024-21634 was introduced in 9.12.1 of Jira Software Data Center and Server. This vulnerability with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated attacker to take...
DoS (Denial of Service) minimatch Dependency in Jira Software Data Center and Server
This High severity DoS Denial of Service vulnerability known as CVE-2022-3517 was introduced in 10.3.13 of Jira Software Data Center and Server. This vulnerability with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated attacker to take...
CVE-2025-22167
This High severity Path Traversal Arbitrary Write vulnerability was introduced in versions: 9.12.0, 10.3.0 and remain present in 11.0.0 of Jira Software Data Center and Server. This Path Traversal Arbitrary Write vulnerability, with a CVSS Score of 8.7, allows an attacker to modify any filesystem...
CVE-2025-22167
This High severity Path Traversal Arbitrary Write vulnerability was introduced in versions: 9.12.0, 10.3.0 and remain present in 11.0.0 of Jira Software Data Center and Server. This Path Traversal Arbitrary Write vulnerability, with a CVSS Score of 8.7, allows an attacker to modify any filesystem...
CVE-2025-22167
CVE-2025-22167 is a high-severity path traversal with arbitrary file write in Atlassian Jira Software Data Center and Server. It affects Jira instances in the 9.12.0, 10.3.0, and 11.0.0 lineages, allowing an attacker to modify any filesystem path writable by the Jira JVM process. The CVSS v4.0 ba...
EUVD-2020-6341
Malware in sbrugna...