Jira-Scan

Jira-Scan Python 3에서만 테스트됨 http 또는 https를 제외한 웹사이트 목록을 제공하면 각 사이트에 대해 SSRF 취약점을 테스트합니다. DO에서 VPS를 사용하세요 CVE-2017-9506 Atlassian OAuth Plugin의 IconUriServlet은 버전 1.3.0부터 1.9.12 미만, 버전 2.0.0부터 2.0.4 미만에서 원격 공격자가 서버 측 요청 위조SSRF를 통해 내부 네트워크 리소스의 콘텐츠에 접근하거나 XSS 공격을 수행할 수 있도록 합니다. Atlassian Jira에 따르면 다...

CVE-2017-9506

개념 증명 SSRF & XSS https://jira.you.com//plugins/servlet/oauth/users/icon-uri?consumerUri=http://www.google.co.uk CVE-2017-9506 Atlassian OAuth Plugin의 IconUriServlet은 버전 1.3.0부터 1.9.12 이전까지, 그리고 버전 2.0.0부터 2.0.4 이전까지의 버전에서 원격 공격자가 서버 측 요청 위조SSRF를 통해 내부 네트워크 리소스에 접근하거나 XSS 공격을 수행할 수 있도록 허용합니다...

jira-ssrf

jira-ssrf CVE-2017-9506 Atlassian OAuth Plugin의 IconUriServlet 버전 1.3.0 이상 1.9.12 미만 및 버전 2.0.0 이상 2.0.4 미만은 원격 공격자가 서버 측 요청 위조SSRF를 통해 내부 네트워크 리소스의 콘텐츠에 접근하거나 XSS 공격을 수행할 수 있게 합니다...

Atlassian Jira < 7.2.15 OAuth Plugin IconUriServlet Internal Network Resource Disclosure CSRF

According to its self-reported version number, the version of Atlassian JIRA hosted on the remote web server is prior to 7.2.15. It is, therefore, affected by a internal network resource disclosure CSRF vulnerability in the OAuth plugin IconUriServlet. Note that Nessus has not tested for this iss...

Atlassian Bitbucket < 4.14.4 OAuth Plugin IconUriServlet Internal Network Resource Disclosure CSRF

The version of Atlassian Bitbucket installed on the remote host is prior to 4.14.4. It is, therefore, affected by a internal network resource disclosure CSRF vulnerability in the OAuth plugin IconUriServlet. Note that Nessus has not tested for this issue but has instead relied only on the...

Atlassian Crowd < 2.11.2 OAuth Plugin IconUriServlet Internal Network Resource Disclosure CSRF

The version of Atlassian Crowd installed on the remote host is prior to 2.11.2. It is, therefore, affected by a internal network resource disclosure CSRF vulnerability in the OAuth plugin IconUriServlet. Note that Nessus has not tested for this issue but has instead relied only on the application...

Atlassian Crucible < 4.3.2 OAuth Plugin IconUriServlet Internal Network Resource Disclosure CSRF

According to its self-reported version, the installation of Atlassian Crucible running on the remote host is prior to 4.3.2. It is, therefore, affected by a internal network resource disclosure CSRF vulnerability in the OAuth plugin IconUriServlet. Note that Nessus has not tested for this issue b...

Atlassian Confluence < 6.1.3 OAuth Plugin IconUriServlet Internal Network Resource Disclosure CSRF

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 6.1.3. It is, therefore, affected by a internal network resource disclosure CSRF vulnerability in the OAuth plugin IconUriServlet. Note that Nessus has not tested for this...

Atlassian FishEye < 4.3.2 OAuth Plugin IconUriServlet Internal Network Resource Disclosure CSRF

According to its self-reported version, the installation of Atlassian FishEye running on the remote host is prior to 4.3.2. It is, therefore, affected by a internal network resource disclosure CSRF vulnerability in the OAuth plugin IconUriServlet. Note that Nessus has not tested for this issue bu...

CVE-2017-9506

The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote attackers to access the content of internal network resources and/or perform an XSS attack via Server Side Request Forgery SSRF...

CVE-2017-9506

The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote attackers to access the content of internal network resources and/or perform an XSS attack via Server Side Request Forgery SSRF...

CVE-2017-9506

CVE-2017-9506 affects Atlassian Jira/Confluence/etc. OAuth Plugin IconUriServlet. Versions 1.3.0–1.9.11 and 2.0.0–2.0.3 are vulnerable to SSRF and cross-site scripting via the IconUriServlet, enabling access to internal network resources and potential CSRF-style effects. The issue is fixed in 1.9...

CVE-2017-9506: Server-Side Request Forgery (SSRF)

The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote attackers to access the content of internal network resources and/or perform an XSS attack via Server Side Request Forgery SSRF...