Threats tagged 'ghsa-7vf8-5cw6-wvpx'

A server-side request forgery (SSRF) vulnerability exists in the Jira ticketing filter lookup feature of Devolutions Server versions 2026.2.22.0 and earlier. This flaw allows an authenticated user with low privileges to exploit the vulnerability by sending requests to an attacker-controlled server address. Successful exploitation can lead to disclosure of stored Jira service account credentials.