CVE-2026-19369

MEDIUM

CVE: CVE-2026-19369 - A vulnerability was found in KS-GEN-AI jira-mcp-server 0Sign in to save

CVSS

5.3

CVSS v3.1

EPSS

0.1%

Exploit Prediction Score

Published

August 9, 2026

Exploitability

EPSS probability 0.1%

Description

A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the function axios.get of the file src/index.ts of the component add_attachment_from_public_url. The manipulation of the argument imageUrl results in server-side request forgery. The attack requires a local approach. The project was informed of the problem early through an issue report but has not responded yet.

Weaknesses

CWE-918

Affected Packages

No package data available.

Aliases

CVE-2026-19369

Related references

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://github.com/KS-GEN-AI/jira-mcp-server/
https://github.com/KS-GEN-AI/jira-mcp-server/issues/6
https://vuldb.com/cve/CVE-2026-19369
https://vuldb.com/submit/866267
https://vuldb.com/vuln/387253
https://vuldb.com/vuln/387253/cti