QID 150547

Jira is a proprietary issue tracking product, product developed by Atlassian. It provides bug tracking, issue tracking, and project management functions.

Multiple Vulnerabilities are identified in Atlassian Jira Server:
CVE-2018-13400: Several administrative resources missing WebSudo (improper access control vulnerability)
CVE-2018-13401: Open redirect in the XsrfErrorAction resource
CVE-2018-13402: Open redirect in many resources
CVE-2018-13404: The VerifyPopServerConnection resource was vulnerable to SSRF

Affected version:
before version 7.6.9
from version 7.7.0 before version 7.7.5
from version 7.8.0 before version 7.8.5
from version 7.9.0 before version 7.9.3
from version 7.10.0 before version 7.10.3
from version 7.11.0 before version 7.11.3
from version 7.12.0 before version 7.12.3
before version 7.13.1

QID Detection Logic:(Unauthenticated)
It checks for vulnerable version of Atlassian Jira.

Successful exploitation of these vulnerabilities may allow remote attacker to impact the application's confidentiality, integrity and availability via improper access control, open redirect and SSRF vulnerabilities.