Tag
SSRF Protection Bypass in mcp-atlassian
1 rule 2 TTPs 1 CVEThe mcp-atlassian library is vulnerable to an SSRF bypass (CVE-2026-77274) due to a URL parsing discrepancy between the security validator and the HTTP client, allowing attackers to access internal or loopback services.
Authentication Bypass in mcp-atlassian HTTP Transport
1 rule 8 TTPs 2 CVEsThe mcp-atlassian package contains an authentication bypass vulnerability (CVE-2026-77244) that allows unauthenticated network-adjacent attackers to execute tools using the operator's Jira and Confluence credentials.
Atlassian Confluence CVE-2023-22515 Exploitation Attempt
2 rules 1 TTP 1 CVEDetection of CVE-2023-22515 exploitation attempts targeting Atlassian Confluence servers by sending crafted HTTP requests to specific vulnerable endpoints, potentially leading to unauthorized access and privilege escalation.
Confluence Pre-Auth RCE via OGNL Injection (CVE-2023-22527)
2 rules 1 TTP 1 CVEAttackers are exploiting CVE-2023-22527, a critical remote code execution vulnerability in Atlassian Confluence Server and Data Center, by sending crafted POST requests to a specific endpoint to inject and execute arbitrary OGNL expressions, potentially leading to complete system compromise.
Metasploit Exploitation via Malicious Confluence Plugin
2 rules 3 TTPsA Metasploit module exploits Atlassian Confluence servers by deploying a malicious Java plugin that downloads Meterpreter, granting the attacker full control over the compromised system.
Confluence Unauthenticated Remote Code Execution (CVE-2022-26134)
2 rules 4 TTPs 1 CVE 2 IOCsExploitation of CVE-2022-26134, an unauthenticated remote code execution vulnerability in Atlassian Confluence, allows attackers to execute arbitrary code on vulnerable servers, potentially leading to complete system compromise.