CoreCVE
Back

MEDIUM

The ManageJiraConnectors API in Atlassian Jira Align before version 10.109.2 allows remote attackers to exploit this issue to access internal network resources via a Server-Side Request Forgery

Published Oct 14, 2022

Description

The ManageJiraConnectors API in Atlassian Jira Align before version 10.109.2 allows remote attackers to exploit this issue to access internal network resources via a Server-Side Request Forgery. This can be exploited by a remote, unauthenticated attacker with Super Admin privileges by sending a specially crafted HTTP request.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-918

SSRF

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner atlassian
Published Oct 14, 2022
Updated Oct 29, 2024
Reserved Jul 26, 2022
Link CVE-2022-36802
CISA Vulnrichment
Updated Oct 2, 2024
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2022-36802
Red Hat
Severity n/a
Public date n/a
Links CVE-2022-36802
ENISA EUVD
Assigner atlassian
Published Oct 14, 2022
Updated Oct 29, 2024
Exploited since n/a
Link EUVD-2022-39502
EUVD-2022-39502