CVE-2026-73496 MCP Atlassian: Arbitrary server-side file read via attachment upload

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the confluenceuploadattachment and confluenceuploadattachments tools pass a client-controlled filepath through src/mcpatlassian/confluence/attachments.py uploadattachment, and the...

CVE-2019-8449

CVE-2019-8449 针对Jira v8.3.4以下版本的利用 CVSS评分: 5.0 漏洞类型: 信息泄露 认证: 不需要 受影响版本: 2.1 - 8.3.4 发布日期: 2019-09-11 Exploit-DB: https://www.exploit-db.com/exploits/47990 描述 Jira 8.4.0之前版本中的/rest/api/latest/groupuserpicker资源允许远程攻击者通过信息泄露漏洞枚举用户名。 用法 root@kitploit: python CVE-2019-8449.py 链接...

CVE-2019-8451

CVE-2019-8451 https://jira.atlassian.com/browse/JRASERVER-69793 root@kitploit: http://host:port/plugins/servlet/gadgets/makeRequest?url=http://:@'.formathost, port, target https://host:port/plugins/servlet/gadgets/makeRequest?url=https://:@'.formathost, port, target...

CVE-2019-12836

CVE-2019-12836 应用 JEditor v3.0.5 - JIRA 的所见即所得编辑器 适用于 Jira 的简单而强大的富文本编辑器。可导入 HTML 邮件、粘贴富内容、创建模板并预填充字段。 产品供应商 Bobronix 供应商网站 http://bobronix.com/ CVE 参考 https://vulners.com/cve/CVE-2019-12836 受影响的产品代码库 JEditor - Jira 的所见即所得编辑器 - v3.0.5 受影响组件 JEditor v3.0.5 描述 Jira 使用的 Bobronix JEditor 编辑器（v3.0.6...

CVE-2021-26086

CVE-2021-26086 Atlassian Jira Server/Data Center 8.4.0 - Lectura/Inclusión remota limitada de archivos Endpoints vulnerables: root@kitploit: WEB-INF/web.xml WEB-INF/decorators.xml WEB-INF/classes/seraph-config.xml META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties...

PT-2026-91441

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the confluence upload attachment and confluence upload attachments tools pass a client-controlled file path through src/mcp atlassian/confluence/attachments.py upload attachment, and...

CVE-2019-8449

CVE-2019-8449 Prueba de concepto de explotación para CVE-2019-8449 Jira 8.4.0 Enumeración de usuarios Detalle: https://www.cvedetails.com/cve/CVE-2019-8449/ Uso $ go run CVE-2019-8449.go -f USERFILE.txt -p 8080 -u example.com...

Apache OFBiz Directory Traversal - Remote Code Execution

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.13 id: CVE-2024-32113 info: name: Apache OFBiz Directory Traversal - Remote Code Execution author: DhiyaneshDK severity: high description: |...

CVE-2026-48206

A flaw was found in the Apache Camel JIRA component. Due to improper input validation, non-Camel-prefixed Exchange header constants can bypass the HTTP header filter. This allows a remote attacker, potentially unauthenticated, to supply specific headers and override intended values. Consequently,...

Jira Server and Data Center - Information Disclosure

Jira Server and Data Center is susceptible to information disclosure. An attacker can enumerate users via the /ViewUserHover.jspa endpoint and thus potentially access sensitive information, modify data, and/or execute unauthorized operations. Affected versions are before version 7.13.6, from...

Jira Server and Data Center - Information Disclosure

Jira Server and Data Center is susceptible to information disclosure. An attacker can enumerate users via the QueryComponentRendererValue!Default.jspa endpoint and thus potentially access sensitive information, modify data, and/or execute unauthorized operations, Affected versions are before...

BASM (Broken Authentication & Session Management) org.bouncycastle:bcprov-jdk18on Dependency in Jira Software Data Center

This is a vulnerability in a non-Atlassian Jira Software dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity BASM Broken Authentication & Session Management vulnerability was introduced in versions 9.12.1, 10.0.0, 10.1.1,...

DoS (Denial of Service) org.apache.tomcat:tomcat-coyote Dependency in Jira Service Management Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Service Management Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector...

DoS (Denial of Service) org.apache.tomcat:tomcat-coyote Dependency in Jira Software Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 9.12.2, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Software Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector o...

DoS (Denial of Service) Apache Tomcat Dependency in Jira Service Management Data Center and Server

This High severity DoS Denial of Service vulnerability known as CVE-2026-13506 was introduced in 10.0.0 and later of Jira Service Management Data Center and Server. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

DoS (Denial of Service) Apache Tomcat Dependency in Jira Software Data Center and Server

This High severity DoS Denial of Service vulnerability known as CVE-2026-13506 was introduced in 10.0.0 and later of Jira Software Data Center and Server. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

DoS (Denial of Service) browserslist Dependency in Jira Service Management Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Service Management Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector...

DoS (Denial of Service) browserslist Dependency in Jira Software Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Software Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

DoS (Denial of Service) linkify-it Dependency in Jira Service Management Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 11.1.0, 11.2.0, and 11.3.0 of Jira Service Management Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an...

BASM (Broken Authentication & Session Management) Bouncy Castle Dependency in Jira Service Management Data Center and Server

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-12802 was introduced in 10.0.0 and later of Jira Service Management Data Center and Server. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.7 and a CVSS...