CVE-2010-1165

Atlassian JIRA versions 3.12 through 4.1 are vulnerable to arbitrary code execution due to a flaw allowing remote authenticated administrators to modify the attachment , index , or backup path and subsequently upload a file. This vulnerability was exploited in the wild in April 2010. Exploitation...

VulnCheck KEV: CVE-2010-1165

Atlassian JIRA 3.12 through 4.1 allows remote authenticated administrators to execute arbitrary code by modifying the 1 attachment aka attachments, 2 index aka indexing, or 3 backup path and then uploading a file, as exploited in the wild in April 2010...