PRIOn knowledge basePRION:CVE-2010-1165

HistoryApr 20, 2010 - 3:30 p.m.

Path traversal

2010-04-2015:30:00

PRIOn knowledge base

www.prio-n.com

7.9 High

AI Score

Confidence

Low

0.024 Low

EPSS

Percentile

90.0%

JSON

Atlassian JIRA 3.12 through 4.1 allows remote authenticated administrators to execute arbitrary code by modifying the (1) attachment (aka attachments), (2) index (aka indexing), or (3) backup path and then uploading a file, as exploited in the wild in April 2010.

CPENameOperatorVersion
jiraeq3.13.2
jiraeq4.0.2
jiraeq3.12
jiraeq4.0.1
jiraeq4.1
jiraeq3.13.3
jiraeq3.12.3
jiraeq3.13.5
jiraeq3.13.1
jiraeq3.12.2

Name	Operator	Version
jira	eq	3.13.2
jira	eq	4.0.2
jira	eq	3.12
jira	eq	4.0.1
jira	eq	4.1
jira	eq	3.13.3
jira	eq	3.12.3
jira	eq	3.13.5
jira	eq	3.13.1
jira	eq	3.12.2

Rows per page:

1-10 of 141

References

confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2010-04-16

jira.atlassian.com/browse/JRA-20995

jira.atlassian.com/browse/JRA-21004

secunia.com/advisories/39353

www.openwall.com/lists/oss-security/2010/04/16/3

www.openwall.com/lists/oss-security/2010/04/16/4

www.securityfocus.com/bid/39485

exchange.xforce.ibmcloud.com/vulnerabilities/57828