Skip to content
OpenAdvisories

Product · Discourse

discourse-jira

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.1
    CVE-2023-44384

    Discourse-Jira could make SSRF attack by setting Jira URL to an arbitrary location

    Discourse-jira is a Discourse plugin allows Jira projects, issue types, fields and field options will be synced automatically. An administrator user can make an SSRF attack by setting the Jira URL to an arbitrary location and enabling the `discourse_jira_verb…

    Discourse discourse-jira Web / CMS