vulnwire
6.1med

CVE-2017-9506

The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allow…

Published 9 y ago · modified 4 mo ago · JSON

CVSS
6.1
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
71.6%
percentile 99%
Public exploits
0
none known

The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote attackers to access the content of internal network resources and/or perform an XSS attack via Server Side Request Forgery (SSRF).

CISA SSVC assessment

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
2 y ago

Exploit prediction (EPSS)

71.60% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.06.1CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
NVD2.04.3AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

  • Atlassian Atlassian OAuth Plugin

Classification

Weakness
  • CWE-918 Server-Side Request Forgery

References

  • dontpanic.42.nl /2017/12/there-is-proxy-in-your-atlassian.html · x_refsource_MISC, x_transferred
  • twitter.com /ankit_anubhav/status/973566620676382721 · x_refsource_MISC, x_transferred
  • ecosystem.atlassian.net /browse/OAUTH-344 · x_refsource_MISC, x_transferred
  • twitter.com /Zer0Security/status/983529439433777152 · x_refsource_MISC, x_transferred
  • medium.com /bugbountywriteup/piercing-the-veil-server-side-request-forgery-to-niprnet-access-171018bc · x_refsource_MISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.