Description
Atlassian OAuth服务器端请求伪造漏洞
Atlassian OAuth服务器端请求伪造漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2017-9506
https://ecosystem.atlassian.net/browse/OAUTH-344
https://www.tenablecloud.cn/plugins/was/98999
https://cve.imfht.com/detail/CVE-2017-9506
https://www.ddpoc.com/DVB-2021-2248.html
https://jira.atlassian.com/browse/JRASERVER-65862
https://www.acunetix.com/vulnerabilities/web/atlassian-oauth-plugin-iconuriservlet-ssrf/
https://github.com/random-robbie/jira-scan
http://dontpanic.42.nl/2017/12/there-is-proxy-in-your-atlassian.html
https://medium.com/bugbountywriteup/piercing-the-veil-server-side-request-forgery-to-niprnet-access-171018bca2c3