PT-2026-69313

Name of the Vulnerable Software and Affected Versions KS-GEN-AI jira-mcp-server version 0.2.0 Description An issue exists in the add attachment from public url component within the src/index.ts file. The axios.get function is susceptible to server-side request forgery SSRF, a condition where an...

CVE-2026-19369: Server-Side Request Forgery (SSRF)

A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the function axios.get of the file src/index.ts of the component addattachmentfrompublicurl. The manipulation of the argument imageUrl results in server-side request forgery. The attack requires a local approach. The proje...