Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Atlassian Jira Server-Side Request Forgery (SSRF) Vulnerability - CVE-2017-16865 - Vulnerability Database
Atlassian Jira

Atlassian Jira Server-Side Request Forgery (SSRF) Vulnerability - CVE-2017-16865

Medium
Reference: CVE-2017-16865
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-16865
Title: Atlassian Jira Server-Side Request Forgery (SSRF) Vulnerability
Overview:

The Trello importer in Atlassian Jira before version 7.6.1 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery (SSRF). When running in an environment like Amazon EC2 this flaw maybe used to access to a metadata resource that provides access credentials and other potentially confidential information.