PT-2023-5888 · Discourse · Discourse-Jira

Pmusaraj · Published 2023-10-06 · Updated 2023-10-11 · CVE-2023-44384

Positive Technologies (AI Summary)

CVSS v3.1

4.1

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Discourse-jira (affected versions not specified)

Description The issue is related to the implementation of the Discourse-jira plugin, which allows for the synchronization of Jira projects, issue types, fields, and field options. An administrator user can perform a Server-Side Request Forgery (SSRF) attack by setting the Jira URL to an arbitrary location and enabling the discourse jira verbose log site setting. A moderator user could manipulate the request path to the Jira API, allowing them to perform arbitrary GET requests using the Jira API credentials, potentially with elevated permissions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SSRF

Weakness Enumeration

CWE-691

CWE-918

Related Identifiers

BDU:2023-06581

CVE-2023-44384

GHSA-PMV5-H2X6-35FH

Affected Products

Discourse-Jira

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/44xxx/CVE-2023-44384.json · Exploit
• https://github.com/discourse/discourse-jira/security/advisories/GHSA-pmv5-h2x6-35fh · Vendor Advisory
• https://github.com/discourse/discourse-jira/commit/8a2d3ad228883199fd5f081cc93d173c88e2e48f · Patch
• https://github.com/discourse/discourse-jira/pull/50 · Patch
• https://osv.dev/vulnerability/CVE-2023-44384 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-06581 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-44384 · Security Note
• https://twitter.com/VulmonFeeds/status/1710395022397379049 · Twitter Post
• https://t.me/cibsecurity/71760 · Telegram Post
• https://vuldb.com/?id.241482 · Note
• https://twitter.com/CVEnew/status/1710346354067726814 · Twitter Post