PT-2025-30819 · WordPress · Apwide Golive Jira Plugin

Published 2025-07-25 · Updated 2025-10-10 · CVE-2025-45939

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Apwide Golive Jira plugin version 10.2.0

Description The Apwide Golive Jira plugin contains a Server-Side Request Forgery (SSRF) issue. This issue is related to the test webhook function, which allows for potential exploitation through server-side request forgery.

Recommendations Update to a newer version of the Apwide Golive Jira plugin that addresses this issue. As a temporary workaround, consider disabling the test webhook function until a patch is available.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2025-45939

Affected Products

Apwide Golive Jira Plugin

References · 6

• https://osv.dev/vulnerability/CVE-2025-45939 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-45939 · Security Note
• https://golive.apwide.com/doc/latest/server-data-center/2025-06-06 · Note
• http://golive.com · Note
• https://t.me/cveNotify/138282 · Telegram Post
• https://twitter.com/CVEnew/status/1948749158073962775 · Twitter Post