FICHE CVE

CVE-2017-9506

Publiée le 2017-08-23 · Dernière modification le 2026-06-17

The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote attackers to access the content of internal network resources and/or perform an XSS attack via Server Side Request Forgery (SSRF).

CVSS 3.06.1 MOYENNE

Type de faiblesse

Falsification de requête côté serveur (SSRF) · CWE-918