GobyVuls/CVE-2022-26135.md
Goby 55cecdcb6f
Create CVE-2022-26135.md
add CVE-2022-26135
2023-04-01 12:38:22 +08:00

1.0 KiB

Jira Server SSRF (CVE-2022-26135)

Vulnerability Jira Server SSRF (CVE-2022-26135)
Chinese name Jira Server 服务端请求伪造 (CVE-2022-26135)
CVSS core 7.0
FOFA Query (click to view the results directly) body="Signup!default.jspa"
Number of assets affected 4586
Description Atlassian JIRA Server is a server version of a defect tracking management system developed by Atlassian in Australia. The system is mainly used to track and manage various problems and defects in the work. A security vulnerability exists in Atlassian Jira Server. An attacker exploits this vulnerability to perform a server-side request forgery attack via a batch endpoint.
Impact A security vulnerability exists in Atlassian Jira Server. An attacker exploits this vulnerability to perform a server-side request forgery attack via a batch endpoint.