Lucene search
+L

174 matches found

OSV
OSV
added 2026/09/22 6:48 p.m.3 views

CVE-2026-77256 MCP Atlassian: OAuth refresh-token backup file is world-readable under default Unix umask

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the plaintext OAuth fallback file containing refresh and access tokens is written with permissions inherited from the process umask. Under common or permissive configurations, other...

8.3CVSS5.8AI score
SaveExploits0References6
Rows per page
Query Builder