CVE-2019-11581criticalunder attackCWE-74

CVE-2019-11581: critical vulnerability in Atlassian Jira Server and Data Center

Published · Updated

Follow this CVE+ Monitor Jira Server and Data Center

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 85%
from disclosure to weaponsame day
Published on NVDAug 9
1st PoCJul 16
CISA KEV+941d
Action required by CISAfederal deadline: 2022-09-07

Apply updates per vendor instructions.

In short

A flaw in Jira Server and Data Center allows attackers to inject malicious template code through email functions, leading to remote code execution on the affected server. This is critical because it gives attackers complete control over the system without needing valid credentials.

Technical detail

Server-side template injection (SSTI) vulnerability in ContactAdministrators and SendBulkMail actions allows unauthenticated remote code execution. The attack vector requires sending specially crafted input to template rendering mechanisms; successful exploitation grants arbitrary code execution with the privileges of the Jira process.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. An attacker is able to remotely execute code on systems that run a vulnerable version of Jira Server or Data Center. All versions of Jira Server and Data Center from 4.4.0 before 7.6.14, from 7.7.0 before 7.13.5, from 8.0.0 before 8.0.3, from 8.1.0 before 8.1.2, and from 8.2.0 before 8.2.3 are affected by this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Atlassian · Jira Server and Data Center
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Atlassian Jira Server and Data Center

In the same product, most dangerous first.

CVE-2020-14167—CVE-2020-14167EPSS 2.1%CVE-2020-14168—CVE-2020-14168EPSS 1.7%CVE-2020-4029—CVE-2020-4029EPSS 1.6%CVE-2019-20105—CVE-2019-20105EPSS 1.5%CVE-2019-20106—CVE-2019-20106EPSS 1.1%CVE-2020-4022—CVE-2020-4022EPSS 1.1%