VulnCheck KEV: CVE-2019-11581

Atlassian Jira Server and Data Center contain a server-side template injection vulnerability which can allow for remote code execution...

Mail.ru: RCE Jira(CVE-2019–11581) [my-com.atlassian.net]

Hello, Summary i found the domain my-com.atlassian.net is vulnerable with RCE JiraCVE-2019–11581 via contact admin function POC - on page https://my-com.atlassian.net/secure/ContactAdministrators!default.jspa - use payload on Subject & Request details...

Atlassian JIRA Server Template Injection Vulnerability (CVE-2019-11581)

Binary data jiracve201911581templateinjection.nbin...

CVE-2019-11581

There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. An attacker is able to remotely execute code on systems that run a vulnerable version of Jira Server or Data Center. All versions of Jira Server and...

CVE-2019-11581

CVE-2019-11581 affects Jira Server and Data Center (ContactAdministrators and SendBulkMail actions). The vulnerability is a server-side template injection that enables remote code execution when user-supplied input is rendered as a Velocity template. Affected versions include Jira Server/Data Cen...

Atlassian Jira Server Remote Code Execution (CVE-2019-11581)

A remote code execution vulnerability exists in Atlassian Jira Server and Jira Data Center. A remote attackers can exploit this vulnerability by sending a specially crafted HTTP request packet to an affected system...

CVE-2019-11581

creationtimestamp| type| source ---|---|--- 2019-07-15 10:01:05+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/2882 2019-07-22 19:08:51+00:00| exploited| https://t.me/ctinow/13786 2019-09-13 14:05:15+00:00| exploited| https://t.me/SecLabNews/5845 2019-11-19 17:37:46+00:00|...

CVE-2019-11581 - Template injection in various resources

There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. For this issue to be exploitable at least one of the following conditions must be met: an SMTP server has been configured in Jira and the Contact...

CVE-2019-11581 - Template injection in various resources

There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. For this issue to be exploitable at least one of the following conditions must be met: an SMTP server has been configured in Jira and the Contact...