{"cvss":0.0,"datePublished":"2023-12-06T00:00:00Z","dateUpdated":"2023-12-06T00:00:00Z","description":"The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery (SSRF) vulnerability due to a logic bug in the JiraWhitelist class.","dueDate":"","id":"CVE-2019-8451","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"Jira Server and Data Center","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Atlassian Jira Server and Data Center Server-Side Request Forgery","vendor":"Atlassian"}