Cyber Security Daily Radar

#advisory

共收录 23334 条相关情报。

← 返回所有主题
安全公告2026-09-22 发布INFO

MCP Atlassian: Arbitrary server-local file upload to Jira/Confluence attachments via unrestricted file_path parameters

CVE-2026-77247

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Ji

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-73
安全公告2026-09-22 发布INFO

MCP Atlassian: Reflected XSS in OAuth Setup Callback Handler

CVE-2026-77272

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-79
安全公告2026-09-22 发布INFO

MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read (incomplete fix for CVE-2026-27825)

CVE-2026-77269

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-22
安全公告2026-09-22 发布INFO

MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read and exfiltration via MCP tool call

CVE-2026-77266

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, up

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-22
安全公告2026-09-22 发布INFO

MCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update_issue

CVE-2026-77255

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-22#cwe-441
安全公告2026-09-22 发布INFO

MCP Atlassian: Path Traversal / Arbitrary File Read in confluence_upload_attachment MCP tool (incomplete fix of CVE-2026-27825)

CVE-2026-77262

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, co

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-22
安全公告2026-09-22 发布INFO

MCP Atlassian: Unauthenticated HTTP MCP requests can use globally configured Jira and Confluence credentials

CVE-2026-77254

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, re

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-306
安全公告2026-09-22 发布INFO

MCP Atlassian: Jira and Confluence attachment upload tools can read arbitrary server-local files

CVE-2026-77253

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Ji

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-22
安全公告2026-09-22 发布INFO

MCP Atlassian: HTTP upload tools accept arbitrary server-local file paths

CVE-2026-77257

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, HT

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-22
安全公告2026-09-22 发布INFO

MCP Atlassian: SSRF redirect protection missing for basic-auth and OAuth authentication branches

CVE-2026-77261

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, _m

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-918
安全公告2026-09-22 发布INFO

MCP Atlassian: Arbitrary local file READ via unconstrained file_path in upload_attachment (Confluence + Jira)

CVE-2026-77260

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-22
安全公告2026-09-22 发布INFO

MCP Atlassian: Incomplete path traversal fix allows intra-CWD module overwrite and RCE (bypass of CVE-2026-27825)

CVE-2026-77271

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, va

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-22#cwe-94
安全公告2026-09-22 发布INFO

Moonshot AI Kimi Code MCP Configuration Loader config-loader.ts os command injection

CVE-2026-95660

A security flaw has been discovered in Moonshot AI Kimi Code up to 0.31.0. The affected element is an unknown function o

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-77#cwe-78
安全公告2026-09-22 发布INFO

MCP Atlassian: Incomplete fix for CVE-2026-27826: DNS rebinding bypasses SSRF validation (validated IP not pinned)

CVE-2026-77242

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, va

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-367#cwe-918
安全公告2026-09-22 发布INFO

MCP Atlassian: ENABLED_TOOLS / Toolset authorization bypass

CVE-2026-77243

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, EN

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-862
安全公告2026-09-22 发布INFO

MCP Atlassian: JIRA_PROJECTS_FILTER / CONFLUENCE_SPACES_FILTER allow forbidden-project content exfiltration (one LIVE-proven on Atlassian Cloud)

CVE-2026-77251

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, Ji

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-1276
安全公告2026-09-22 发布INFO

MCP Atlassian: JIRA_PROJECTS_FILTER and CONFLUENCE_SPACES_FILTER can be bypassed in search tools

CVE-2026-77252

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, ca

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-284
安全公告2026-09-22 发布INFO

mcp-atlassian has an incomplete SSRF remediation

CVE-2026-77267

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-918
安全公告2026-09-22 发布INFO

MCP Atlassian: OAuth fallback token storage writes plaintext access and refresh tokens with group-readable permissions

CVE-2026-77250

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, OA

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-312
安全公告2026-09-22 发布INFO

[mcp-atlassian] Authentication bypass in HTTP transport: AtlassianOpaqueTokenVerifier accepts any non-empty token

CVE-2026-77244

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, th

历史摘要 · 未重新核验 · OSV.dev

#advisory#cwe-287#cwe-303#cwe-862