{"id":"CVE-2022-26135","published":"2022-06-30T05:20:15Z","modified":"2024-10-29T15:20:52Z","title":"A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user…","vendor":"Atlassian","product":"Jira Core Server","tier":"core","eol":null,"affectedVersions":[{"vendor":"Atlassian","product":"Jira Core Server","versions":[">= 8.0.0, < unspecified",">= unspecified, < 8.13.22",">= 8.14.0, < unspecified",">= unspecified, < 8.20.10",">= 8.21.0, < unspecified",">= unspecified, < 8.22.4"]},{"vendor":"Atlassian","product":"Jira Software Server","versions":[">= 8.0.0, < unspecified",">= unspecified, < 8.13.22",">= 8.14.0, < unspecified",">= unspecified, < 8.20.10",">= 8.21.0, < unspecified",">= unspecified, < 8.22.4"]},{"vendor":"Atlassian","product":"Jira Software Data Center","versions":[">= 8.0.0, < unspecified",">= unspecified, < 8.13.22",">= 8.14.0, < unspecified",">= unspecified, < 8.20.10",">= 8.21.0, < unspecified",">= unspecified, < 8.22.4"]},{"vendor":"Atlassian","product":"Jira Service Management Server","versions":[">= 4.0.0, < unspecified",">= unspecified, < 4.13.22",">= 4.14.0, < unspecified",">= unspecified, < 4.20.10",">= 4.21.0, < unspecified",">= unspecified, < 4.22.4"]},{"vendor":"Atlassian","product":"Jira Service Management Data Center","versions":[">= 4.0.0, < unspecified",">= unspecified, < 4.13.22",">= 4.14.0, < unspecified",">= unspecified, < 4.20.10",">= 4.21.0, < unspecified",">= unspecified, < 4.22.4"]}],"description":{"text":"A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user who joined via the sign-up feature) to perform a full read server-side request forgery via a batch endpoint. This affects Atlassian Jira Server and Data Center from version 8.0.0 before version 8.13.22, from version 8.14.0 before 8.20.10, from version 8.21.0 before 8.22.4. This also affects Jira Management Server and Data Center versions from version 4.0.0 before 4.13.22, from version 4.14.0 before 4.20.10 and from version 4.21.0 before 4.22.4.","provenance":"source","from":"CVE.org"},"summary":{"text":"A flaw in the Mobile Plugin for Jira Data Center and Server affects Atlassian Jira Core Server, where a batch endpoint enables server-side request forgery. An attacker with network access and a valid user account, including one created through the sign-up feature, can exploit it without any user interaction to make the server issue arbitrary requests and read the responses.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:13:17Z"},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.71616,"percentile":0.99418,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":1,"pulses":[{"name":"CVE Data","url":"https://otx.alienvault.com/pulse/69929b597293fe5837b9c95c","created":"2026-02-16"}],"provenance":"machine"},"cwes":[{"id":"CWE-918","name":"Server-Side Request Forgery"}],"references":[{"url":"https://jira.atlassian.com/browse/JRASERVER-73863","tags":["x_refsource_MISC"]},{"url":"https://jira.atlassian.com/browse/JSDSERVER-11840","tags":["x_refsource_MISC"]},{"url":"https://confluence.atlassian.com/display/JIRA/Jira+Server+Security+Advisory+29nd+June+2022","tags":["x_refsource_MISC"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2022-30702","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-30702","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":2,"skipped":0,"earliest":"2022-06-24","earliestUrl":"https://github.com/assetnote/jira-mobile-ssrf-exploit","repos":[{"name":"assetnote/jira-mobile-ssrf-exploit","url":"https://github.com/assetnote/jira-mobile-ssrf-exploit","stars":85,"created":"2022-06-24"},{"name":"safe3s/CVE-2022-26135","url":"https://github.com/safe3s/CVE-2022-26135","stars":11,"created":"2022-07-07"}]},"first":{"date":"2022-06-24","source":"PoC-in-GitHub","url":"https://github.com/assetnote/jira-mobile-ssrf-exploit"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2022-06-24","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/assetnote/jira-mobile-ssrf-exploit","provenance":"source"},{"date":"2022-06-30","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2022-26135","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":30.1,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.88,"detail":"percentile 0.9942"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"2 PoC-in-GitHub repos"},{"name":"Mentioned in OTX pulses","points":0.68,"detail":"1 pulse"},{"name":"CVSS severity","points":4.55,"detail":"base score 6.5"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}