7 matches found
PT-2026-105848
Environment - Project: sooperset/mcp-atlassian - Affected function: validate url for ssrf - Affected path: header-based Jira/Confluence URL authentication flow - Tested endpoint: POST /mcp - Tested version: 2.14.5 Description The SSRF protection in validate url for ssrf can be bypassed with a URL...
PT-2026-96923
Name of the Vulnerable Software and Affected Versions MCP Atlassian versions prior to 0.22.0 Description The software is susceptible to Server-Side Request Forgery SSRF, a condition where an attacker can induce the server to make requests to an unintended location. The validate url for ssrf...
PT-2026-97054
Name of the Vulnerable Software and Affected Versions e621ng versions prior to 26.09.16 Description Untrusted request parameters are passed directly to the Rails url for function within the PaginatorComponent and controller navigation links. This allows attackers to manipulate pagination and...
PT-2025-43525
Name of the Vulnerable Software and Affected Versions axewater sharewarez version 2.4.3 Description A Host Header Injection flaw exists in the password reset functionality of the software. This allows remote attackers to potentially take over accounts by manipulating the Host header during passwo...
CVE-2022-26324: Improper Neutralization of Input During Web Page Generation
Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.6.0000...
PT-2018-11286
Name of the Vulnerable Software and Affected Versions GitLab Community Edition and Enterprise Edition versions 10.7.x through 10.7.5 Description An issue was discovered due to the usage of url for which contained a XSS issue. This was caused by url for allowing arbitrary protocols as a parameter...
Fedora Update for WebKit FEDORA-2008-3415
Check for the Version of WebKit OpenVAS Vulnerability Test Fedora Update for WebKit FEDORA-2008-3415 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...