PT-2017-18975 · Atlassian · Oauth Plugin+2

Published 2017-08-23 · Updated 2019-05-10 · CVE-2017-9506

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Atlassian OAuth Plugin versions 1.3.0 through 1.9.11 Atlassian OAuth Plugin versions 2.0.0 through 2.0.3

Description The issue allows remote attackers to access internal network resources and/or perform an XSS attack via Server Side Request Forgery (SSRF) through the IconUriServlet. This affects the Atlassian OAuth Plugin, potentially impacting Jira Work Management and Jira Software.

Recommendations For Atlassian OAuth Plugin versions 1.3.0 through 1.9.11, update to version 1.9.12 or later. For Atlassian OAuth Plugin versions 2.0.0 through 2.0.3, update to version 2.0.4 or later.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2017-9506

Affected Products

Oauth Plugin

Jira

Jira Work Management

References · 11

• 🔥 https://github.com/random-robbie/Jira-Scan · Exploit
• 🔥 https://twitter.com/Zer0Security/status/983529439433777152 · Exploit
• 🔥 https://twitter.com/ankit_anubhav/status/973566620676382721 · Exploit
• 🔥 http://dontpanic.42.nl/2017/12/there-is-proxy-in-your-atlassian.html · Exploit
• https://osv.dev/vulnerability/CVE-2017-9506 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-9506 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9506 · Security Note
• https://ecosystem.atlassian.net/browse/OAUTH-344 · Vendor Advisory
• https://unit42.paloaltonetworks.com/exploits-interactsh · Note
• https://medium.com/bugbountywriteup/piercing-the-veil-server-side-request-forgery-to-niprnet-access-171018bca2c3 · Note
• https://jira.atlassian.com/browse/JRASERVER-65862 · Note