Jira-CVE-2019-8451

Jira CVE-2019-8451 POC 説明 JiraホストがCVE-2019-8451に対して脆弱かどうかを確認するための概念実証スキャン CVE-2019-8451 CVE-2019-8451は、事前認証のサーバーサイドリクエストフォージェリ（SSRF）の脆弱性で、/plugins/servlet/gadgets/makeRequest リソースに見られます。 この脆弱性はJiraサーバーバージョン7.6.0で導入され、バージョン7.13.9および8.4.0で修正されました。 必要条件 requestsライブラリのみ必要です。 pip3 install requests...

CVE-2019-8451

CVE-2019-8451 https://jira.atlassian.com/browse/JRASERVER-69793 root@kitploit: http://host:port/plugins/servlet/gadgets/makeRequest?url=http://:@'.formathost, port, target https://host:port/plugins/servlet/gadgets/makeRequest?url=https://:@'.formathost, port, target...

VulnCheck KEV: CVE-2019-8451

The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery SSRF vulnerability due to a logic bug in the JiraWhitelist class...

Atlassian Jira Server-Side Request Forgery Vulnerability (CNVD-2019-32327)

Atlassian Jira is a tool developed by Australian company Atlassian for defect tracking, issue tracking and project management. A server-side request forgery vulnerability exists in the /plugins/servlet/gadgets/makeRequest resource in versions of Atlassian Jira prior to 8.4.0, which can be exploit...

PT-2019-19049 · Atlassian · Jira

Name of the Vulnerable Software and Affected Versions: Jira versions prior to 8.4.0 Description: The issue allows remote attackers to access the content of internal network resources via a Server Side Request Forgery SSRF vulnerability due to a logic bug in the JiraWhitelist class. This is relate...