Server-side request forgery in Atlassian Jira Core Server
Priority HIGH 67CWE-918Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-918 and the CVSS impact.
Summary
A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user who joined via the sign-up feature) to perform a full read server-side request forgery via a batch endpoint. This affects Atlassian Jira Server and Data Center from version 8.0.0 before version 8.13.22, from version 8.14.0 before 8.20.10, from version 8.21.0 before 8.22.4. This also affects Jira Management Server and Data Center versions from version 4.0.0 before 4.13.22, from version 4.14.0 before 4.20.10 and from version 4.21.0 before 4.22.4.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.71616 99th percentileScored 2026-11-07
Fix Fixed Jira Core Server (Atlassian): 8.13.22, 8.20.10, 8.22.4Jira Software Server (Atlassian): 8.13.22, 8.20.10, 8.22.4+3 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Atlassian | Jira Core Server | 8.0.0 and later; before 8.13.22; 8.14.0 and later; before 8.20.10; 8.21.0 and later; before 8.22.4 | 8.13.22, 8.20.10, 8.22.4 | Patch available | CNA |
| Atlassian | Jira Software Server | 8.0.0 and later; before 8.13.22; 8.14.0 and later; before 8.20.10; 8.21.0 and later; before 8.22.4 | 8.13.22, 8.20.10, 8.22.4 | Patch available | CNA |
| Atlassian | Jira Software Data Center | 8.0.0 and later; before 8.13.22; 8.14.0 and later; before 8.20.10; 8.21.0 and later; before 8.22.4 | 8.13.22, 8.20.10, 8.22.4 | Patch available | CNA |
| Atlassian | Jira Service Management Server | 4.0.0 and later; before 4.13.22; 4.14.0 and later; before 4.20.10; 4.21.0 and later; before 4.22.4 | 4.13.22, 4.20.10, 4.22.4 | Patch available | CNA |
| Atlassian | Jira Service Management Data Center | 4.0.0 and later; before 4.13.22; 4.14.0 and later; before 4.20.10; 4.21.0 and later; before 4.22.4 | 4.13.22, 4.20.10, 4.22.4 | Patch available | CNA |
- Jira Core Server VendorAtlassian Affected 8.0.0 and later; before 8.13.22; 8.14.0 and later; before 8.20.10; 8.21.0 and later; before 8.22.4 Fixed in 8.13.22, 8.20.10, 8.22.4 Patch available CNA
- Jira Software Server VendorAtlassian Affected 8.0.0 and later; before 8.13.22; 8.14.0 and later; before 8.20.10; 8.21.0 and later; before 8.22.4 Fixed in 8.13.22, 8.20.10, 8.22.4 Patch available CNA
- Jira Software Data Center VendorAtlassian Affected 8.0.0 and later; before 8.13.22; 8.14.0 and later; before 8.20.10; 8.21.0 and later; before 8.22.4 Fixed in 8.13.22, 8.20.10, 8.22.4 Patch available CNA
- Jira Service Management Server VendorAtlassian Affected 4.0.0 and later; before 4.13.22; 4.14.0 and later; before 4.20.10; 4.21.0 and later; before 4.22.4 Fixed in 4.13.22, 4.20.10, 4.22.4 Patch available CNA
- Jira Service Management Data Center VendorAtlassian Affected 4.0.0 and later; before 4.13.22; 4.14.0 and later; before 4.20.10; 4.21.0 and later; before 4.22.4 Fixed in 4.13.22, 4.20.10, 4.22.4 Patch available CNA
CPE configurations NVD · 8
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:* | 8.0.0 to before 8.13.22; 8.14.0 to before 8.20.10; 8.21.0 to before 8.22.4 | Vulnerable | Atlassian |
| cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:* | 8.0.0 to before 8.13.22; 8.14.0 to before 8.20.10; 8.21.0 to before 8.22.4 | Vulnerable | Atlassian |
| cpe:2.3:a:atlassian:jira_service_desk:*:*:*:*:data_center:*:*:* | 4.0.0 to before 4.13.22 | Vulnerable | Atlassian |
| cpe:2.3:a:atlassian:jira_service_desk:*:*:*:*:server:*:*:* | 4.0.0 to before 4.13.22 | Vulnerable | Atlassian |
| cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:data_center:*:*:* | 4.14.0 to before 4.20.10 | Vulnerable | Atlassian |
| cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:server:*:*:* | 4.14.0 to before 4.20.10 | Vulnerable | Atlassian |
| cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:data_center:*:*:* | 4.21.0 to before 4.22.4 | Vulnerable | Atlassian |
| cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:server:*:*:* | 4.21.0 to before 4.22.4 | Vulnerable | Atlassian |
- cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:* Versions 8.0.0 to before 8.13.22; 8.14.0 to before 8.20.10; 8.21.0 to before 8.22.4 Vulnerable ·Atlassian
- cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:* Versions 8.0.0 to before 8.13.22; 8.14.0 to before 8.20.10; 8.21.0 to before 8.22.4 Vulnerable ·Atlassian
- cpe:2.3:a:atlassian:jira_service_desk:*:*:*:*:data_center:*:*:* Versions 4.0.0 to before 4.13.22 Vulnerable ·Atlassian
- cpe:2.3:a:atlassian:jira_service_desk:*:*:*:*:server:*:*:* Versions 4.0.0 to before 4.13.22 Vulnerable ·Atlassian
- cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:data_center:*:*:* Versions 4.14.0 to before 4.20.10 Vulnerable ·Atlassian
- cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:server:*:*:* Versions 4.14.0 to before 4.20.10 Vulnerable ·Atlassian
- cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:data_center:*:*:* Versions 4.21.0 to before 4.22.4 Vulnerable ·Atlassian
- cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:server:*:*:* Versions 4.21.0 to before 4.22.4 Vulnerable ·Atlassian
Remediation
- Fix · CNA Jira Core Server (Atlassian) Fixed in 8.13.22, 8.20.10, 8.22.4
- Fix · CNA Jira Software Server (Atlassian) Fixed in 8.13.22, 8.20.10, 8.22.4
- Fix · CNA Jira Software Data Center (Atlassian) Fixed in 8.13.22, 8.20.10, 8.22.4
- Fix · CNA Jira Service Management Server (Atlassian) Fixed in 4.13.22, 4.20.10, 4.22.4
- Fix · CNA Jira Service Management Data Center (Atlassian) Fixed in 4.13.22, 4.20.10, 4.22.4
Timeline
- 2026-10-02 Threatist record created from CVE-2022-26135
- 2026-10-03 Alias added: GHSA-wfhv-4qh5-c632
References
More Atlassian Jira Data Center vulnerabilities
- TI-2026-67904 Arbitrary file access in Atlassian Data Center products KEVCVSS 4.0CRITICAL 9.3
- TI-2022-00460 Improper authentication in Atlassian Jira Core Server CVSS 3.1CRITICAL 9.8
- TI-2024-14399 Code injection in Atlassian Confluence Data Center CVSS 3.1HIGH 8.8
- TI-2021-08038 Path traversal in Atlassian Jira Server KEVCVSS 3.1MEDIUM 5.3
- TI-2020-18559 Missing authorization in Atlassian Jira Data Center CVSS 3.1CRITICAL 9.8
- TI-2020-18587 Incorrect authorization in Atlassian Jira Server CVSS 3.1MEDIUM 5.3
Sources
- CVE-2022-26135 · CVE Program
- CVE-2022-26135 · NVD
- FIRST EPSS
- GHSA-wfhv-4qh5-c632 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences