VulnCheck KEV: CVE-2019-8451

The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery SSRF vulnerability due to a logic bug in the JiraWhitelist class...

Atlassian Jira Server-Side Request Forgery Vulnerability (CNVD-2019-32327)

Atlassian Jira is a tool developed by Australian company Atlassian for defect tracking, issue tracking and project management. A server-side request forgery vulnerability exists in the /plugins/servlet/gadgets/makeRequest resource in versions of Atlassian Jira prior to 8.4.0, which can be exploit...

PT-2019-19049 · Atlassian · Jira

Name of the Vulnerable Software and Affected Versions: Jira versions prior to 8.4.0 Description: The issue allows remote attackers to access the content of internal network resources via a Server Side Request Forgery SSRF vulnerability due to a logic bug in the JiraWhitelist class. This is relate...