CVE-2019-8451

This repository contains a Python script that exploits CVE-2019-8451, an SSRF vulnerability in Jira before version 8.4.0. The script sends a crafted request to the vulnerable endpoint to access internal network resources.

This PoC demonstrates an SSRF vulnerability in Atlassian Jira via the gadgets/makeRequest endpoint, allowing attackers to make arbitrary requests to internal or external resources. The exploit leverages URL manipulation to bypass access controls.

This repository contains a Python script to scan for CVE-2019-8451, a pre-authentication SSRF vulnerability in Jira. It checks the version and attempts an SSRF request to determine vulnerability status.

This PoC demonstrates an SSRF vulnerability in Jira by exploiting the `/plugins/servlet/gadgets/makeRequest` endpoint without authentication. It sends a crafted request to an attacker-controlled URL, confirming the vulnerability.

This script is a proof-of-concept for CVE-2019-8451, an SSRF vulnerability in Atlassian products. It crafts a malicious request to the target URL and checks for indicators of a successful SSRF attack, such as the presence of 'set-cookie' in the response body.