阿里云漏洞库

漏洞描述

Atlassian Jira 多款产品 Mobile Plugin中存在服务端请求伪造漏洞(SSRF)，经过身份验证的远程攻击者可通过向Jira Core REST API发送特制请求，从而伪造服务端发起请求，从而导致敏感信息泄露，同时为下一步攻击利用提供条件。需注意的是，若服务端开启注册功能，则未授权用户可通过注册获取权限进而利用。

影响版本：

针对 Jira Core Server, Jira Software Server, and Jira Software Data Center:

Versions after 8.0 and before 8.13.22

8.14.x

8.15.x

8.16.x

8.17.x

8.18.x

8.19.x

8.20.x before 8.20.10

8.21.x

8.22.x before 8.22.4

针对 Jira Service Management Server and Data Center:

Versions after 4.0 and before 4.13.22

4.14.x

4.15.x

4.16.x

4.17.x

4.18.x

4.19.x

4.20.x before 4.20.10

4.21.x

4.22.x before 4.22.4

安全版本：

针对 Jira Core Server, Jira Software Server, and Jira Software Data Center:

8.13.x >= 8.13.22

8.20.x >= 8.20.10

8.22.x >= 8.22.4

9.0.0

针对Jira Service Management Server and Data Center:

4.13.x >= 4.13.22

4.20.x >= 4.20.10

4.22.x >= 4.22.4

5.0.0

解决建议

1、关闭前台注册功能。
2、升级至安全版本。

参考链接
https://confluence.atlassian.com/display/JIRA/Jira+Server+Security+Advisory+2...
https://confluence.atlassian.com/jira/jira-server-security-advisory-29nd-june...
https://jira.atlassian.com/browse/JRASERVER-73863
https://jira.atlassian.com/browse/JSDSERVER-11840

受影响软件情况

1
#	类型	厂商	产品	版本	影响面
	运行在以下环境
	应用	atlassian	jira_data_center	*	From (including) 8.0.0	Up to (excluding) 8.13.22
	运行在以下环境
	应用	atlassian	jira_data_center	*	From (including) 8.14.0	Up to (excluding) 8.20.10
	运行在以下环境
	应用	atlassian	jira_data_center	*	From (including) 8.21.0	Up to (excluding) 8.22.4
	运行在以下环境
	应用	atlassian	jira_server	*	From (including) 8.0.0	Up to (excluding) 8.13.22
	运行在以下环境
	应用	atlassian	jira_server	*	From (including) 8.14.0	Up to (excluding) 8.20.10
	运行在以下环境
	应用	atlassian	jira_server	*	From (including) 8.21.0	Up to (excluding) 8.22.4
	运行在以下环境
	应用	atlassian	jira_service_management	*	From (including) 4.0.0	Up to (excluding) 4.13.22
	运行在以下环境
	应用	atlassian	jira_service_management	*	From (including) 4.14.0	Up to (excluding) 4.20.10
	运行在以下环境
	应用	atlassian	jira_service_management	*	From (including) 4.21.0	Up to (excluding) 4.22.4

攻击路径

远程
攻击复杂度

容易
权限要求

普通权限
影响范围

有限影响
EXP成熟度

POC 已公开
补丁情况

官方补丁
数据保密性

数据泄露
数据完整性

传输被破坏
服务器危害

无影响
全网数量

N/A

CWE-ID	漏洞类型
CWE-918	服务端请求伪造（SSRF）

中危 Jira Data Center and Server Mobile Plugin 授权SSRF漏洞（CVE-2022-26135）

漏洞描述

解决建议

参考链接

受影响软件情况