THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-19369 (MEDIUM 5.3) — A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the function axios.get of the file src/index.ts of the component add_attachment_from_public_url. The manipulation of the argument imageUrl results in server-side request forgery. The attack requires a loca

[NVD] CVE-2026-19369 (MEDIUM 5.3) — A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the function axios.get of the file src/index.ts of the component add_attachment_from_public_url. The manipulation of the argument imageUrl results in server-side request forgery. The attack requires a loca

mednvdPublished 2026-08-09

CVE-2026-19369 CVSS: 5.3 MEDIUM Published: 2026-08-09T21:16:59.363

A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the function axios.get of the file src/index.ts of the component add_attachment_from_public_url. The manipulation of the argument imageUrl results in server-side request forgery. The attack requires a local approach. The project was informed of the problem

Indicators of compromise

CVE-2026-19369cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-19369