Skip to content
Threat Feed
Subscribe

Tag

Jira

7 briefs RSS
high threat

Atlassian Jira Server SSRF Vulnerability (CVE-2019-8451)

CVE-2019-8451 is an unauthenticated Server-Side Request Forgery (SSRF) vulnerability in the Atlassian Jira Server gadgets servlet that allows attackers to access internal network resources.

exploited Jira Server vulnerability ssrf atlassian jira
1r 2t 1c
high advisory

SSRF Protection Bypass in mcp-atlassian

The mcp-atlassian library is vulnerable to an SSRF bypass (CVE-2026-77274) due to a URL parsing discrepancy between the security validator and the HTTP client, allowing attackers to access internal or loopback services.

mcp-atlassian ssrf application-vulnerability lfd mcp atlassian confluence jira cve-2026-77257
1r 2t 1c
critical advisory

Authentication Bypass in mcp-atlassian HTTP Transport

The mcp-atlassian package contains an authentication bypass vulnerability (CVE-2026-77244) that allows unauthenticated network-adjacent attackers to execute tools using the operator's Jira and Confluence credentials.

mcp-atlassian +1 authentication-bypass api-security atlassian mcp path-traversal ai-security exfiltration vulnerability +9
1r 8t 2c
critical threat

Unauthenticated RCE via Server-Side Template Injection in Atlassian Jira

An unauthenticated remote code execution vulnerability (CVE-2019-11581) exists in the 'ContactAdministrators' form of Atlassian Jira Server due to insecure Velocity template rendering of the 'subject' parameter.

exploited Jira Server web-application-vulnerability rce ssti jira
1r 2t 1c
high advisory

Multiple Vulnerabilities in Atlassian Jira

Multiple vulnerabilities in Atlassian Jira could allow an attacker to execute arbitrary code, manipulate and disclose data, conduct cross-site scripting attacks, or cause a denial-of-service condition.

Jira atlassian vulnerability xss dos
1r 1t
high advisory

SaaS Notification Pipeline Abuse for Phishing and Spam Campaigns

Attackers are abusing notification pipelines in SaaS platforms like GitHub and Jira to deliver phishing and spam emails by exploiting legitimate platform features and bypassing traditional email security measures.

saas-abuse phishing credential-harvesting github jira
3r 1t 2i
high advisory

GitLab Jira Connect Authentication Bypass Vulnerability (CVE-2026-2370)

GitLab CE/EE versions 14.3 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 are vulnerable to improper authorization checks in Jira Connect installations, allowing an authenticated user with minimal workspace permissions to obtain installation credentials and impersonate the GitLab application.

gitlab jira authentication authorization cve-2026-2370
2r 2t