CVE-2017-9506
- Source
- https://cve.org/CVERecord?id=CVE-2017-9506
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-9506.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2017-9506
- Published
- 2017-08-23T19:29:00Z
- Modified
- 2026-04-10T04:02:41Z
- Severity
-
- 6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote attackers to access the content of internal network resources and/or perform an XSS attack via Server Side Request Forgery (SSRF).
- References
-
- https://medium.com/bugbountywriteup/piercing-the-veil-server-side-request-forgery-to-niprnet-access-171018bca2c3
- https://ecosystem.atlassian.net/browse/OAUTH-344
- https://twitter.com/ankit_anubhav/status/973566620676382721
- http://dontpanic.42.nl/2017/12/there-is-proxy-in-your-atlassian.html
- https://twitter.com/Zer0Security/status/983529439433777152
Affected packages
Git / bitbucket.org/atlassian/atlassian-oauth
Affected ranges
- Type
- GIT
- Repo
- https://bitbucket.org/atlassian/atlassian-oauth
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroduced0 Unknown introduced commit / All previous commits are affectedLast Affected
- Database specific
-
Show details
{ "versions": [ { "introduced": "0" }, { "last_affected": "1.3.0" }, { "introduced": "0" }, { "last_affected": "1.3.1" }, { "introduced": "0" }, { "last_affected": "1.3.2" }, { "introduced": "0" }, { "last_affected": "1.3.3" }, { "introduced": "0" }, { "last_affected": "1.3.4" }, { "introduced": "0" }, { "last_affected": "1.3.5" }, { "introduced": "0" }, { "last_affected": "1.3.6" }, { "introduced": "0" }, { "last_affected": "1.3.7" }, { "introduced": "0" }, { "last_affected": "1.3.8" }, { "introduced": "0" }, { "last_affected": "1.3.9" }, { "introduced": "0" }, { "last_affected": "1.3.10" }, { "introduced": "0" }, { "last_affected": "1.4.0" }, { "introduced": "0" }, { "last_affected": "1.4.0-m1" }, { "introduced": "0" }, { "last_affected": "1.4.0-m2" }, { "introduced": "0" }, { "last_affected": "1.4.1" }, { "introduced": "0" }, { "last_affected": "1.5.0" }, { "introduced": "0" }, { "last_affected": "1.5.0-m1" }, { "introduced": "0" }, { "last_affected": "1.5.0-m3" }, { "introduced": "0" }, { "last_affected": "1.6.0" }, { "introduced": "0" }, { "last_affected": "1.6.0-m1" }, { "introduced": "0" }, { "last_affected": "1.6.0-m4" }, { "introduced": "0" }, { "last_affected": "1.6.1" }, { "introduced": "0" }, { "last_affected": "1.7.0" }, { "introduced": "0" }, { "last_affected": "1.8.0" }, { "introduced": "0" }, { "last_affected": "1.8.0-m1" }, { "introduced": "0" }, { "last_affected": "1.8.1" }, { "introduced": "0" }, { "last_affected": "1.8.2" }, { "introduced": "0" }, { "last_affected": "1.8.3" }, { "introduced": "0" }, { "last_affected": "1.8.4" }, { "introduced": "0" }, { "last_affected": "1.8.5" }, { "introduced": "0" }, { "last_affected": "1.9.0-m1" }, { "introduced": "0" }, { "last_affected": "1.9.0-m2" }, { "introduced": "0" }, { "last_affected": "1.9.1" }, { "introduced": "0" }, { "last_affected": "1.9.2" }, { "introduced": "0" }, { "last_affected": "1.9.3" }, { "introduced": "0" }, { "last_affected": "1.9.4" }, { "introduced": "0" }, { "last_affected": "1.9.5" }, { "introduced": "0" }, { "last_affected": "1.9.6" }, { "introduced": "0" }, { "last_affected": "1.9.7" }, { "introduced": "0" }, { "last_affected": "1.9.8" }, { "introduced": "0" }, { "last_affected": "1.9.9" }, { "introduced": "0" }, { "last_affected": "1.9.10" }, { "introduced": "0" }, { "last_affected": "1.9.11" }, { "introduced": "0" }, { "last_affected": "2.0.0" }, { "introduced": "0" }, { "last_affected": "2.0.1" }, { "introduced": "0" }, { "last_affected": "2.0.2" }, { "introduced": "0" }, { "last_affected": "2.0.3" } ] }