CVE-2019-8451
82Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 94%
from disclosure to weapon5 days
Published on NVDSep 11
1st PoC+5d
VulnCheck+1547d
exploitation probability
94%top 1% of all CVEs
observed exploitation
yesVulnCheck
5 public exploit(s)
The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery (SSRF) vulnerability due to a logic bug in the JiraWhitelist class.
Affected products
Atlassian · Jirapublic PoCs found — 5
vulncheckvulncheck.com/xdb/5673ded3ca5dunverifiedvulncheckvulncheck.com/xdb/4e7db44dc02funverifiedvulncheckvulncheck.com/xdb/32f510621376unverifiedvulncheckvulncheck.com/xdb/dd5c7d02a17dunverifiedvulncheckvulncheck.com/xdb/37a7425b84e0unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.