Skip to content
OpenAdvisories

Vendor

ManoManoTech

1 known vulnerabilities.

Products

firefighter-incident 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.9
    CVE-2026-42864

    FireFighter: Unauthenticated SSRF in Raid jira_bot endpoint allows IAM credential theft

    FireFighter is an incident management application. Prior to 0.0.54, the POST /api/v2/firefighter/raid/jira_bot endpoint (CreateJiraBotView) is reachable without authentication (permission_classes = [permissions.AllowAny]). Its attachments payload is fetched s…

    ManoManoTech firefighter-incident firefighter-incident PyPI