https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 11:06:22 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-06581 bdu:2023-06581 https://cve.radiocsirt.org/vuln/bdu:2023-06581 https://cve.radiocsirt.org/vuln/euvd-2026-186650 EUVD-2026-186650 https://cve.radiocsirt.org/vuln/euvd-2026-186650 https://cve.radiocsirt.org/vuln/fkie_cve-2023-44384 <p>Discourse-jira is a Discourse plugin allows Jira projects, issue types, fields and field options will be synced automatically. An administrator user can make an SSRF attack by setting the Jira URL to an arbitrary location and enabling the `discourse_jira_verbose_log` site setting. A moderator user could manipulate the request path to the Jira API, allowing them to perform arbitrary GET requests using the Jira API credentials, potentially with elevated permissions, used by the application.</p> <p>Discourse-jira is a Discourse plugin allows Jira projects, issue types, fields and field options will be synced automatically. An administrator user can make an SSRF attack by setting the Jira URL to an arbitrary location and enabling the `discourse_jira_verbose_log` site setting. A moderator user could manipulate the request path to the Jira API, allowing them to perform arbitrary GET requests using the Jira API credentials, potentially with elevated permissions, used by the application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-44384 https://cve.radiocsirt.org/vuln/gsd-2023-44384 gsd-2023-44384 https://cve.radiocsirt.org/vuln/gsd-2023-44384