Podatność CVE-2015-5603

Podatność CVE-2015-5603

Publikacja: 2015-09-21

Opis:

	Tytuł	Autor	Data
High	Jira / HipChat For Jira Java Code Execution	David Black	02.09.2015
Low	JIRA and HipChat for JIRA plugin Velocity Template Injection Vulnerability	Chris Wood	29.10.2015
Med.	Atlassian HipChat for Jira Plugin Velocity Template Injection	sinn3r	05.12.2015

Typ:

(Improper Control of Generation of Code ('Code Injection'))

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
6.5/10	6.4/10	8/10

Affected software
Atlassian -> Hipchat

http://packetstormsecurity.com/files/133401/Jira-HipChat-For-Jira-Java-Code-Execution.html

http://www.rapid7.com/db/modules/exploit/multi/http/jira_hipchat_template

http://www.securityfocus.com/archive/1/536374/100/0/threaded

https://confluence.atlassian.com/jira/jira-and-hipchat-for-jira-plugin-security-advisory-2015-08-26-776650785.html

https://www.exploit-db.com/exploits/38551/

https://www.exploit-db.com/exploits/38905/