This vulnerability, CVE-2022-1471, is rated with a CVSSv3 9.8 and was released in 2022 and has reemerged in the Atlassian December 2023: Security Advisories Overview. Apache Submarine was also affected and the ticket SUBMARINE-1371 even contains an curl request to trigger the vulnerability.
