Atlassian JIRA Server Template Injection Vulnerability (CVE-2019-11581)

Binary data jiracve201911581templateinjection.nbin...

Atlassian Jira 8.2.x < 8.2.3 Template Injection Vulnerability

According to its self-reported version number, the Atlassian Jira application running on the remote host is 4.4.x 7.6.14, 7.7.x 7.13.5, 8.0.x 8.0.3, 8.1.x 8.1.2, 8.2.x 8.2.3. It is, therefore, affected by a server-side template injection vulnerability that exists in the ContactAdministrators and...

Atlassian Jira 7.7.x < 7.13.5 Template Injection Vulnerability

According to its self-reported version number, the Atlassian Jira application running on the remote host is 4.4.x 7.6.14, 7.7.x 7.13.5, 8.0.x 8.0.3, 8.1.x 8.1.2, 8.2.x 8.2.3. It is, therefore, affected by a server-side template injection vulnerability that exists in the ContactAdministrators and...

Atlassian Jira 8.1.x < 8.1.2 Template Injection Vulnerability

According to its self-reported version number, the Atlassian Jira application running on the remote host is 4.4.x 7.6.14, 7.7.x 7.13.5, 8.0.x 8.0.3, 8.1.x 8.1.2, 8.2.x 8.2.3. It is, therefore, affected by a server-side template injection vulnerability that exists in the ContactAdministrators and...

CVE-2019-11581 — Atlassian JIRA Template injection vulnerability RCE

There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. An attacker is able to remotely execute code on systems that run a vulnerable version of Jira Server or Data Center. All versions of Jira Server and...