Vulnerabilidades en sooperset
34 resultadosCVE-2026-77258HIGHMCP Atlassian: Arbitrary file read/exfiltration via upload_attachment missing validate_safe_path()EPSS 0.3%CVE-2026-77274HIGHMCP Atlassian: SSRF Protection BypassEPSS 0.3%CVE-2026-77243HIGHMCP Atlassian: ENABLED_TOOLS / Toolset authorization bypassEPSS 0.3%CVE-2026-77249MEDIUMMCP Atlassian: Incomplete fix for CVE-2026-27826: redirect-based SSRF via unhooked requests session in Jira user-permission lookupEPSS 0.3%CVE-2026-77261HIGHMCP Atlassian: SSRF redirect protection missing for basic-auth and OAuth authentication branchesEPSS 0.3%CVE-2026-77242HIGHMCP Atlassian: Incomplete fix for CVE-2026-27826: DNS rebinding bypasses SSRF validation (validated IP not pinned)EPSS 0.3%CVE-2026-77252MEDIUMMCP Atlassian: JIRA_PROJECTS_FILTER and CONFLUENCE_SPACES_FILTER can be bypassed in search toolsEPSS 0.3%CVE-2026-77267HIGHmcp-atlassian has an incomplete SSRF remediationEPSS 0.3%CVE-2026-77244CRITICAL[mcp-atlassian] Authentication bypass in HTTP transport: AtlassianOpaqueTokenVerifier accepts any non-empty tokenEPSS 0.3%CVE-2026-77265MEDIUMMCP Atlassian: SSRF via DNS Rebinding in Header-Based Authentication FlowEPSS 0.3%CVE-2026-77272MEDIUMMCP Atlassian: Reflected XSS in OAuth Setup Callback HandlerEPSS 0.2%CVE-2026-77251HIGHMCP Atlassian: JIRA_PROJECTS_FILTER / CONFLUENCE_SPACES_FILTER allow forbidden-project content exfiltration (one LIVE-proven on Atlassian Cloud)EPSS 0.2%CVE-2026-77268MEDIUMMCP Atlassian: Insecure File Permissions on OAuth Token StorageEPSS 0.1%CVE-2026-77250MEDIUMMCP Atlassian: OAuth fallback token storage writes plaintext access and refresh tokens with group-readable permissionsEPSS 0.1%