CVE-2019-8451: Atlassian Jira Server

Medium severity, CVSS 6.5. EPSS: 94.5% chance of exploitation in the next 30 days.

The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery (SSRF) vulnerability due to a logic bug in the JiraWhitelist class.

Affected products

• Atlassian Jira Server: from 7.6.0, before 8.4.0 (fixed in 8.4.0)

Published 2019-09-11. Last modified 2026-06-17.