CVE-2019-15001

Published: Sep 19, 2019Modified: Nov 21, 2024

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

The Jira Importers Plugin in Atlassian Jira Server and Data Cente from version with 7.0.10 before 7.6.16, from 7.7.0 before 7.13.8, from 8.0.0 before 8.1.3, from 8.2.0 before 8.2.5, from 8.3.0 before 8.3.4 and from 8.4.0 before 8.4.1 allows remote attackers with Administrator permissions to gain remote code execution via a template injection vulnerability through the use of a crafted PUT request.

Affected (12)

Products: Atlassian: Jira Server, Jira Data Center

Atlassian

2 products

Jira Server

Jira Data Center

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Atlassian Jira Server	From 7.0.10 to 7.6.16
Atlassian Jira Server	From 7.7.0 to 7.13.8
Atlassian Jira Server	From 8.0.0 to 8.1.3
Atlassian Jira Server	From 8.2.0 to 8.2.5
Atlassian Jira Server	From 8.3.0 to 8.3.4
Atlassian Jira Server	Version 8.4.0

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Atlassian Jira Data Center	From 7.0.10 to 7.6.16
Atlassian Jira Data Center	From 7.7.0 to 7.13.8
Atlassian Jira Data Center	From 8.0.0 to 8.1.3
Atlassian Jira Data Center	From 8.2.0 to 8.2.5
Atlassian Jira Data Center	From 8.3.0 to 8.3.4
Atlassian Jira Data Center	Version 8.4.0