SID 1:52406

Rule Category

SERVER-WEBAPP -- Snort has detected traffic exploiting vulnerabilities in web based applications on servers.

Alert Message

SERVER-WEBAPP Atlassian Jira makeRequest server side request forgery attempt

Rule Explanation

This event its generated when a server side request forgery attempt is made on the /plugins/servlet/gadgets/makeRequest resource in Jira. Impact: Web Application Attack Details: This rule detects the use of an '@' symbol in the URL parameter of the /plugins/servlet/gadgets/makeRequest resource in Jira, which circumvents the URL whitelist check. Ease of Attack:

What To Look For

No information provided

Known Usage

No public information

False Positives

No known false positives

Contributors

Cisco Talos Intelligence Group