Main Vulnerability Database Vulnerabilities #VU65121

Server-Side Request Forgery (SSRF) in Atlassian products - CVE-2022-26135

Published: July 11, 2022

Vulnerability identifier: #VU65121

CSH Severity: Medium

CVSS v4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N]

CVE-ID: CVE-2022-26135

CWE-ID: CWE-918

Exploitation vector: Remote access

Exploit availability: Public exploit is available

Vulnerability details

The disclosed vulnerability allows a remote user to perform SSRF attacks.

The vulnerability exists due to insufficient validation of user-supplied input in Mobile Plugin for Jira. A remote user can send a specially crafted HTTP request and trick the application to initiate requests to arbitrary systems.

Successful exploitation of this vulnerability may allow a remote attacker gain access to sensitive data, located in the local network or send malicious requests to other servers from the vulnerable system.

Affected software

Jira Service Management Data Center
Jira Service Management Server
Jira Software Data Center
Jira Software Server

How to mitigate CVE-2022-26135

Install updates from vendor's website.

Jira Service Management Data Center - addressed in versions 4.13.22, 4.20.10, 4.22.4, 5.0.0
Jira Service Management Server - addressed in versions 4.13.22, 4.20.10, 4.22.4, 5.0.0
Jira Software Server - addressed in versions 8.13.22, 8.20.10, 8.22.4, 9.0.0
Jira Software Data Center - addressed in versions 8.13.22, 8.20.10, 8.22.4, 9.0.0

Links to Public Exploits and PoC-codes

External References

Related Security Bulletins

SSRF in Mobile Plugin for Jira