646 matches found
CVE-2020-14179
CVE-2020-14179 Exposición de datos sensibles a través del endpoint /secure/QueryComponent!Default.jspa Prioridad: Alta Versiones afectadas: 8.6.0 | 8.8.0 | 8.5.5 | 8.9.0 | 8.10.0 | 8.11.0 Las versiones afectadas de Atlassian Jira Server y Data Center permiten a atacantes remotos no autenticados v...
Jira-CVE-2019-8451
Jira CVE-2019-8451 POC 説明 JiraホストがCVE-2019-8451に対して脆弱かどうかを確認するための概念実証スキャン CVE-2019-8451 CVE-2019-8451は、事前認証のサーバーサイドリクエストフォージェリ（SSRF）の脆弱性で、/plugins/servlet/gadgets/makeRequest リソースに見られます。 この脆弱性はJiraサーバーバージョン7.6.0で導入され、バージョン7.13.9および8.4.0で修正されました。 必要条件 requestsライブラリのみ必要です。 pip3 install requests...
JIRA Workflow Designer Plugin in Atlassian JIRA Server > 6.3.0 - Remote Code Execution (XXE)
The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote attackers to execute arbitrary code, read arbitrary files, or cause a denial of service via a crafted serialized Java object. id: CVE-2017-5983 info: name:...
jira-mobile-ssrf-exploit
CVE-2022-26135 - Jira Data CenterおよびServer向けモバイルプラグインにおけるFull-Read Server Side Request Forgery Assetnoteについて Assetnoteは、お客様の外部アセットを自動的にマッピングし、変更やセキュリティ問題を監視して、深刻な侵害を防止します。 この調査はAssetnoteのセキュリティリサーチチームによって実施されました。 製品とチームの詳細はhttps://assetnote.ioをご覧ください。 ブログ記事 この脆弱性の発見に至った手順を詳述したブログ記事はこちらからご覧いただけます。...
CVE-2019-8451
CVE-2019-8451 https://jira.atlassian.com/browse/JRASERVER-69793 root@kitploit: http://host:port/plugins/servlet/gadgets/makeRequest?url=http://:@'.formathost, port, target https://host:port/plugins/servlet/gadgets/makeRequest?url=https://:@'.formathost, port, target...
CVE-2021-26086
CVE-2021-26086 Atlassian Jira Server/Data Center 8.4.0 - 受限远程文件读取/包含 受影响端点： root@kitploit: WEB-INF/web.xml WEB-INF/decorators.xml WEB-INF/classes/seraph-config.xml META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.xml...
Prototype Pollution axios Dependency in Jira Software Data Center and Server
This is a vulnerability in a non-Atlassian dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity Prototype Pollution vulnerability was introduced in versions 10.3.0 and 11.3.0 of Jira Software Data Center and Server. This...
HTTP Request Smuggling io.netty:netty-codec-http Dependency in Jira Software Data Center
This is a vulnerability in a non-Atlassian Jira Software dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity Injection vulnerability was introduced in versions 9.12.1, 9.16.0, 9.17.0, 10.0.0, 10.1.1, 10.2.0, 10.3.0, 10.4.0,...
HTTP Request Smuggling io.netty:netty-codec-http Dependency in Jira Software Data Center
This is a vulnerability in a non-Atlassian Jira dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This High severity HTTP Request Smuggling vulnerability was introduced in versions 9.12.1, 10.3.0, 11.3.0 of Jira Software Data Center and Jira...
DoS (Denial of Service) ansi-regex Dependency in Jira Software Data Center and Server
This High severity DoS Denial of Service vulnerability was introduced in version 9.15.2, 9.16.0, 9.17.0, 10.1.1, 10.3.13, 11.2.0 of Jira Software Data Center and Server. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of code:java...
Mattermost 安全漏洞
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability in Mattermost versions 11.1.0 and prior to 11.1.x, 11.0.5 and prior to 11.0.x, 10.12.3 and prior to 10.12.x, and 10.11.7 and prior to 10.11.x, which stems from the Jira plugin'...
XXE (XML External Entity Injection) Tika Dependency in Jira Software Data Center and Server
This Jira Software release includes updates to our Apache Tika dependency in response to CVE-2025-66516. Our security team has assessed that the current scope of this CVE does not present the same critical risk in our products, as our use of the dependency doesn’t support the known path for...
DoS (Denial of Service) software.amazon.ion:ion-java Dependency in Jira Software Data Center and Server
This High severity DoS Denial of Service vulnerability known as CVE-2024-21634 was introduced in 9.12.1 of Jira Software Data Center and Server. This vulnerability with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated attacker to take...
DoS (Denial of Service) minimatch Dependency in Jira Software Data Center and Server
This High severity DoS Denial of Service vulnerability known as CVE-2022-3517 was introduced in 10.3.13 of Jira Software Data Center and Server. This vulnerability with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated attacker to take...
CVE-2025-22167
This High severity Path Traversal Arbitrary Write vulnerability was introduced in versions: 9.12.0, 10.3.0 and remain present in 11.0.0 of Jira Software Data Center and Server. This Path Traversal Arbitrary Write vulnerability, with a CVSS Score of 8.7, allows an attacker to modify any filesystem...
CVE-2025-22167
CVE-2025-22167 is a high-severity path traversal with arbitrary file write in Atlassian Jira Software Data Center and Server. It affects Jira instances in the 9.12.0, 10.3.0, and 11.0.0 lineages, allowing an attacker to modify any filesystem path writable by the Jira JVM process. The CVSS v4.0 ba...
CVE-2025-22167
This High severity Path Traversal Arbitrary Write vulnerability was introduced in versions: 9.12.0, 10.3.0 and remain present in 11.0.0 of Jira Software Data Center and Server. This Path Traversal Arbitrary Write vulnerability, with a CVSS Score of 8.7, allows an attacker to modify any filesystem...
EUVD-2020-23830
Malware in sbrugna...