CVE-2022-26135
-CVE-2022-26135- CVE-2022-26135 CVE-2022-26135 poc wwwxusteducn/cve/indexjsp
A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user who joined via the sign-up feature) to perform a full read server-side request forgery via a batch endpoint. This affects Atlassian Jira Server and Data Center from version 8.0.0 before version 8.13.22, from version 8.14.0 prior to 8.20.10, from version 8.21.0 prior to 8.22.4. This also affects Jira Management Server and Data Center versions from version 4.0.0 prior to 4.13.22, from version 4.14.0 prior to 4.20.10 and from version 4.21.0 prior to 4.22.4.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
atlassian jira service management |
||
atlassian jira data center |
||
atlassian jira server |
||
atlassian jira service desk |