References https://jira.atlassian.com/browse/JRASERVER-71559 https://nvd.nist.gov/vuln/detail/CVE-2020-36289 https://avd.aliyun.com/detail?id=AVD-2020-36289 https://www.tenable.com/plugins/nessus/154057 https://cloud.tencent.com/developer/article/1850733 https://qkl.seebug.org/vuldb/ssvid-99272 https://www.sentinelone.com/vulnerability-database/cve-2020-36289/ https://vulners.com/seebug/SSV:99272 https://github.com/r0eXpeR/supplier https://stack.chaitin.com/poc/detail/46 https://www.tenablecloud.cn/plugins/nessus/154056 https://cvepremium.circl.lu/vuln/cve-2020-36289
Related VulnerabilitiesPoCCVE-2026-27826: mcp-atlassian < 0.17.0 - Server-Side Request ForgeryMCP Atlassian 存在SSRF漏洞(CVE-2026-27826)PoCconfluence-xslt-macro-ssrf: Atlassian Confluence XSLT Macro - Server-Side Request ForgeryPoCjira-https-mode-open-redirect: JIRA in HTTPS mode - Open RedirectPoCCVE-2017-5983: JIRA Workflow Designer Plugin in Atlassian JIRA Server > 6.3.0 - Remote Code Execution (XXE)Atlassian Jira Software Data Center And Server 需授权 路径遍历漏洞CVE-2019-3396: Atlassian Confluence Path TraversalCVE-2019-8449: Jira Information DisclosureAtlassian Confluence /json/setup-restore.action 文件上传漏洞(CVE-2023-22518)PoCCVE-2007-0885: Jira Rainbow.Zen - Cross-Site ScriptingPoCCVE-2015-8399: Atlassian Confluence <5.8.17 - Information Disclosure