Product

Jira Server (< 7.6.14, 7.13.5, 8.0.3, 8.1.2, 8.2.3)

1 brief RSS

Unauthenticated RCE via Server-Side Template Injection in Atlassian Jira

An unauthenticated remote code execution vulnerability (CVE-2019-11581) exists in the 'ContactAdministrators' form of Atlassian Jira Server due to insecure Velocity template rendering of the 'subject' parameter.

exploited Jira Server web-application-vulnerability rce ssti jira

1r 2t 1c 1h ago