Server-Side Request Forgery Exposes Data of Technology, Industrial and Media Organizations
Unit 42 researchers scanned six public cloud providers and found 7,002 Jira instances, of which 3,152 (45%) were unpatched and confirmed vulnerable to the SSRF flaw CVE-2019-8451, and 1,779 (56%) of those leaked host metadata. The flaw, which lets an at...