Medium
MCP Atlassian: SSRF via DNS Rebinding in Header-Based Authentication Flow
Type: advisorySource: Official CVE List
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, header-supplied Jira or Confluence URLs are resolved and validated before the HTTP client resolves…
Products: mcp-atlassianCVEs: CVE-2026-77265