References https://nvd.nist.gov/vuln/detail/CVE-2022-0540 https://confluence.atlassian.com/jira/jira-security-advisory-2022-04-20-1115127899.html https://jira.atlassian.com/browse/JRASERVER-73650 https://www.anquanke.com/post/id/278301 https://blog.nsfocus.net/atlassian-jira-cve-2022-0540/ https://www.huaweicloud.com/notice/2022/20220421160836979.html https://developer.aliyun.com/article/1147460 https://github.com/Pear1y/CVE-2022-0540-RCE https://www.sentinelone.com/vulnerability-database/cve-2022-0540/ https://blog.viettelcybersecurity.com/cve-2022-0540-authentication-bypass-in-seraph/
Related VulnerabilitiesPoCCVE-2026-17532: Seraphinite Accelerator <= 2.29.18 - Cross-Site ScriptingPoCCVE-2026-27826: mcp-atlassian < 0.17.0 - Server-Side Request ForgeryMCP Atlassian 存在SSRF漏洞(CVE-2026-27826)PoCconfluence-xslt-macro-ssrf: Atlassian Confluence XSLT Macro - Server-Side Request ForgeryPoCCVE-2017-5983: JIRA Workflow Designer Plugin in Atlassian JIRA Server > 6.3.0 - Remote Code Execution (XXE)Atlassian Jira Software Data Center And Server 需授权 路径遍历漏洞CVE-2019-3396: Atlassian Confluence Path TraversalAtlassian Confluence /json/setup-restore.action 文件上传漏洞(CVE-2023-22518)PoCCVE-2015-8399: Atlassian Confluence <5.8.17 - Information DisclosurePoCCVE-2017-9506: Atlassian Jira IconURIServlet - Cross-Site Scripting/Server-Side Request ForgeryPoCCVE-2018-20824: Atlassian Jira WallboardServlet <7.13.1 - Cross-Site Scripting