Description

Jira is vulnerable to a server side template injection vulnerability, which leads to remote code execution.

Remediation

Upgrade to the latest version of Jira

References

CVE-2019-11581

JRASERVER-69532

Related Vulnerabilities

WordPress Plugin MailPress Multiple Vulnerabilities (5.4.4)

WordPress Plugin Crayon Syntax Highlighter Local File Disclosure (2.6.10)

WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.12)

WordPress 5.1.x Directory Traversal (5.1 - 5.1.18)

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Directory Traversal (5.6.23)

Severity

High

Classification

CVE-2019-11581 CWE-22 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Server Side Template Injection