Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2019-8442 PoC — Atlassian Jira 访问控制错误漏洞

Source
https://github.com/chaitin/xray-plugins/blob/main/poc/manual/jira-cve-2019-8442.yml
Associated Vulnerability
Title:Atlassian Jira 访问控制错误漏洞 (CVE-2019-8442)
Description:Atlassian Jira是澳大利亚Atlassian公司的一套缺陷跟踪管理系统。该系统主要用于对工作中各类问题、缺陷进行跟踪管理。 Atlassian Jira 7.13.4之前版本、8.0.4之前版本和8.1.1之前版本中的CachingResourceDownloadRewriteRule类存在安全漏洞。远程攻击者可利用该漏洞访问Jira webroot中的文件。
File Snapshot

 name: poc-yaml-jira-cve-2019-8442
manual: true
transport: http
rules:
    r0:
        request:
     

...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.