Jira IconURIServlet SSRF

By Nash N Sulthan Nash N Sulthan
Published on 01 Oct 2021
Vulnerability

From version 1.3.0 to version 1.9.12, and from version 2.0.0 to version 2.0.4, the Atlassian OAuth Plugin’s IconUriServlet allows remote attackers to read the content of internal network resources and/or launch an XSS attack via Server Side Request Forgery (SSRF).

Mitigation / Precaution

We suggest that you update Jira IconURIServlet in order to fix this vulnerability.

Nash N Sulthan
Written by
Nash N Sulthan
Cyber Security Lead Engineer

Nash is a seasoned Security Engineer who brings a multifaceted approach to safeguarding digital environments. Not only does he excel in implementing robust security measures, but he's also deeply involved in the research and development process, constantly innovating to stay ahead of cyber threats. Nash's commitment to security extends beyond the conventional, making him a valuable contributor to the evolving landscape of digital defense.

Experience the Beagle Security platform
Unlock one full penetration test and all Advanced plan features free for 14 days
4.8 on G2 • ISO 27001 certified
See How Beagle Security Works
No credit card • No setup required
Launch interactive demo