References https://nvd.nist.gov/vuln/detail/CVE-2019-8451 https://jira.atlassian.com/browse/JRASERVER-69793 https://www.rapid7.com/db/vulnerabilities/atlassian-jira-cve-2019-8451/ https://github.com/h0ffayyy/Jira-CVE-2019-8451 https://www.tenable.com/blog/cve-2019-8451-proof-of-concept-available-for-server-side-request-forgery-ssrf-vulnerability-in https://pentest-tools.com/vulnerabilities-exploits/jira-840-server-side-request-forgery_2082 https://github.com/jas502n/CVE-2019-8451 https://www.cnblogs.com/backlion/p/11608371.html https://curz0n.github.io/2019/09/30/jira-ssrf/ https://zhuanlan.zhihu.com/p/113333332 https://github.com/hktalent/MyDocs/blob/main/Atlassian%20Jira%20makeRequest%20SSRF%E6%BC%8F%E6%B4%9E%20CVE-2019-8451.md https://cloud.tencent.com/developer/article/1518348 https://www.cnblogs.com/yuzly/p/13753615.html https://caiqiqi.github.io/2019/11/03/Jira%E6%9C%AA%E6%8E%88%E6%9D%83SSRF%E6%BC%8F%E6%B4%9E-CVE-2019-8451/
Related VulnerabilitiesPoCCVE-2026-27826: mcp-atlassian < 0.17.0 - Server-Side Request ForgeryMCP Atlassian 存在SSRF漏洞(CVE-2026-27826)PoCconfluence-xslt-macro-ssrf: Atlassian Confluence XSLT Macro - Server-Side Request ForgeryPoCjira-https-mode-open-redirect: JIRA in HTTPS mode - Open RedirectPoCCVE-2017-5983: JIRA Workflow Designer Plugin in Atlassian JIRA Server > 6.3.0 - Remote Code Execution (XXE)Atlassian Jira Software Data Center And Server 需授权 路径遍历漏洞CVE-2019-3396: Atlassian Confluence Path TraversalCVE-2019-8449: Jira Information DisclosureAtlassian Confluence /json/setup-restore.action 文件上传漏洞(CVE-2023-22518)PoCCVE-2007-0885: Jira Rainbow.Zen - Cross-Site ScriptingPoCCVE-2015-8399: Atlassian Confluence <5.8.17 - Information Disclosure