Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Atlassian Application Links plugin is vulnerable to cross-site request forgery (CSRF). The following versions are affected: all versions prior to 5.4.21, from version 6.0.0 before version 6.0.12, from version 6.1.0 before version 6.1.2, from version 7.0.0 before version 7.0.2, and from version 7.1.0 before version 7.1.3. The vulnerable plugin is used by Atlassian Jira Server and Data Center before version 8.7.0. An attacker could exploit this by tricking an administrative user into making malicious HTTP requests, allowing the attacker to enumerate hosts and open ports on the internal network where Jira server is present.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Atlassian Jira Server和Data Center Application Links 跨站请求伪造漏洞
Vulnerability Description
Atlassian Application Links等都是澳大利亚Atlassian公司的产品。Atlassian Application Links是一款使用在Atlassian产品中用于创建连接到其他应用程序中的按钮的插件。Atlassian JIRA Server是一套缺陷跟踪管理系统的服务器版本。Atlassian JIRA Data Center是Atlassian JIRA的数据中心版本。 Atlassian Jira Server和Data Center 8.7.0之前版本中的Applic
CVSS Information
N/A
Vulnerability Type
N/A