Log in Start free

Vulnerability · Published Jun 30, 2022 · Assigned by atlassian

CVE-2022-26135

Medium 6.5

In plain English

A medium-severity server-side request forgery in Jira Core Server from Atlassian. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 71.6% (higher than 99.4% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)71.6%top 0.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC

Official description

A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user who joined via the sign-up feature) to perform a full read server-side request forgery via a batch endpoint. This affects Atlassian Jira Server and Data Center from version 8.0.0 before version 8.13.22, from version 8.14.0 before 8.20.10, from version 8.21.0 before 8.22.4. This also affects Jira Management Server and Data Center versions from version 4.0.0 before 4.13.22, from version 4.14.0 before 4.20.10 and from version 4.21.0 before 4.22.4.

Affected products (as reported)

VendorProductVersions
Atlassian Jira Core Server 8.0.0 – before unspecifiedunspecified – before 8.13.228.14.0 – before unspecifiedunspecified – before 8.20.108.21.0 – before unspecifiedunspecified – before 8.22.4
Atlassian Jira Software Server 8.0.0 – before unspecifiedunspecified – before 8.13.228.14.0 – before unspecifiedunspecified – before 8.20.108.21.0 – before unspecifiedunspecified – before 8.22.4
Atlassian Jira Software Data Center 8.0.0 – before unspecifiedunspecified – before 8.13.228.14.0 – before unspecifiedunspecified – before 8.20.108.21.0 – before unspecifiedunspecified – before 8.22.4
Atlassian Jira Service Management Server 4.0.0 – before unspecifiedunspecified – before 4.13.224.14.0 – before unspecifiedunspecified – before 4.20.104.21.0 – before unspecifiedunspecified – before 4.22.4
Atlassian Jira Service Management Data Center 4.0.0 – before unspecifiedunspecified – before 4.13.224.14.0 – before unspecifiedunspecified – before 4.20.104.21.0 – before unspecifiedunspecified – before 4.22.4

Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References