What is CVE-2017-18096?

CVE-2017-18096 is a high-severity vulnerability in Atlassian Application_links, classified under Server-Side Request Forgery (SSRF). CVSS score: 7.2/10. Published 2018-04-04.

How severe is CVE-2017-18096?

High severity. CVSS v3 base score is 7.2 out of 10.

SSRF in Atlassian Application_links

CVE-2017-18096

The OAuth status rest resource in Atlassian Application Links before version 5.2.7, from 5.3.0 before 5.3.4 and from 5.4.0 before 5.4.3 allows remote attackers with administrative rights to access the content of internal network resources…

Vulnerability class: SSRF (Server-Side Request Forgery)

EPSS: 0.012 (65.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Atlassian Application_links
Atlassian Application Links — versions 5.4.0, unspecified, 5.3.0

Weakness classification (CWE)

CWE-918 — Server-Side Request Forgery (SSRF)

References

security@atlassian.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-18096?: CVE-2017-18096 is a high-severity vulnerability in Atlassian Application_links, classified under Server-Side Request Forgery (SSRF). CVSS score: 7.2/10. Published 2018-04-04.
How severe is CVE-2017-18096?: High severity. CVSS v3 base score is 7.2 out of 10.