Published: 21/09/2015 Updated: 09/10/2018

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

VMScore: 660

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

The HipChat for JIRA plugin prior to 6.30.0 for Atlassian JIRA allows remote authenticated users to execute arbitrary Java code via unspecified vectors, related to "Velocity Template Injection Vulnerability."

Vulnerable Product	Search on Vulmon	Subscribe to Product
atlassian hipchat

## # This module requires Metasploit: metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## require 'msf/core' require 'json' class Metasploit3 < Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient include Msf::Exploit::EXE include Msf::Exploit::FileDropper ...

############################################################################ # JIRA and HipChat for JIRA plugin Velocity Template Injection Vulnerability # Date: 2015-08-26 # CVE ID: CVE-2015-5603 # Vendor Link: confluenceatlassiancom/jira/jira-and-hipchat-for-jira-plugin-security-advisory-2015-08-26-776650785html # # Product: JIRA and t ...

CWE-94 https://confluence.atlassian.com/jira/jira-and-hipchat-for-jira-plugin-security-advisory-2015-08-26-776650785.html http://packetstormsecurity.com/files/133401/Jira-HipChat-For-Jira-Java-Code-Execution.html http://www.rapid7.com/db/modules/exploit/multi/http/jira_hipchat_template https://www.exploit-db.com/exploits/38905/https://www.exploit-db.com/exploits/38551/http://www.securityfocus.com/archive/1/536374/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/38905/

CVE-2015-5603

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect