CVE-2025-45939

17th percentile - higher than 17% of all known CVEs

The Apwide Golive 10.2.0 Jira plugin is vulnerable to Server-Side Request Forgery (SSRF) via the test webhook function. An attacker can exploit this function to send requests to internal network resources.

The risk involves potential scanning of internal networks, access to sensitive data, or attacks on other internal systems, which could lead to a security breach for the organization.

It is recommended to immediately update the Apwide Golive plugin to the latest version that fixes this vulnerability. Until the update, restrict access to the test webhook function to trusted users only.