Detections
Analytics
CVE-2019-8451
medium
Description
The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery (SSRF) vulnerability due to a logic bug in the JiraWhitelist class.
From the Tenable Blog
CVE-2019-8451: Proof-of-Concept Available for Server Side Request Forgery (SSRF) Vulnerability in Jira
Published: 2019-09-25
Availability of proof-of-concept code for vulnerability in Jira poses a challenge, as the Jira 7.x branch did not appear to contain a fix for the flaw
References
https://github.com/b0ul1/CVE-2019-8451
https://github.com/pwnosec/jira-vuln-scanner