lgblkb-tools (>=1.0.60, <=1.0.62), qwgc (0.0.3) +3 more potentially affected by CVE-2024-5569 via zipp (2.1.0)

zipp PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on zipp and may be impacted: - lgblkb-tools =1.0.60, =1.0.2, =0.1.3, =1.0.0, =1.0.2 Source cves: CVE-2024-5569 Source advisory: OSV:PYSEC-2026-2074...

EUVD-2017-8039

Malware in sbrugna...

lgblkb-tools (>=1.0.60, <=1.0.62), qwgc (0.0.3) +3 more potentially affected by CVE-2024-5569 via zipp (2.1.0)

zipp PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on zipp and may be impacted: - lgblkb-tools =1.0.60, =1.0.2, =0.1.3, =1.0.0, =1.0.2 Source cves: CVE-2024-5569 Source advisory: OSV:GHSA-JFMJ-5V4G-7637...

Server side request forgery (ssrf)

The Trello importer in Atlassian Jira before version 7.6.1 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery SSRF. When running in an environment like Amazon EC2, this flaw maybe used to access to a metadata resource that provides access...

CVE-2017-16865

The Trello importer in Atlassian Jira before version 7.6.1 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery SSRF. When running in an environment like Amazon EC2, this flaw maybe used to access to a metadata resource that provides access...

CVE-2017-16865

The Trello importer in Atlassian Jira before version 7.6.1 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery SSRF. When running in an environment like Amazon EC2, this flaw maybe used to access to a metadata resource that provides access...

Server Side Request Forgery(SSRF) in the Jira Trello importer - CVE-2017-16865

The Trello importer in Atlassian Jira before version 7.6.1 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery SSRF. When running in an environment like Amazon EC2, this flaw maybe used to access to a metadata resource that provides access...

Server Side Request Forgery(SSRF) in the Jira Trello importer - CVE-2017-16865

The Trello importer in Atlassian Jira before version 7.6.1 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery SSRF. When running in an environment like Amazon EC2, this flaw maybe used to access to a metadata resource that provides access...

PT-2018-6353

Name of the Vulnerable Software and Affected Versions: Atlassian Jira versions prior to 7.6.1 Description: The issue allows remote attackers to access internal network resources via a Server Side Request Forgery SSRF in the Trello importer. This flaw can be used to access a metadata resource that...

CVE-2017-16865: Server-Side Request Forgery (SSRF)

The Trello importer in Atlassian Jira before version 7.6.1 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery SSRF. When running in an environment like Amazon EC2, this flaw maybe used to access to a metadata resource that provides access...