Firetruck

CVE-2019-11581

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Atlassian Jira Server and Data Center contain a server-side template injection vulnerability which can allow for remote code execution.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Jira Server and Data CenterAtlassian / Jira Server and Data Center>= 4.4.0, < unspecifiedaffected
Jira Server and Data CenterAtlassian / Jira Server and Data Center>= 7.7.0, < unspecifiedaffected
Jira Server and Data CenterAtlassian / Jira Server and Data Center>= 8.0.0, < unspecifiedaffected
Jira Server and Data CenterAtlassian / Jira Server and Data Center>= 8.1.0, < unspecifiedaffected
Jira Server and Data CenterAtlassian / Jira Server and Data Center>= 8.2.0, < unspecifiedaffected
Jira Server and Data CenterAtlassian / Jira Server and Data Center>= unspecified, < 8.2.3affected
Jira Server and Data CenterAtlassian / Jira Server and Data Center>= unspecified, < 7.6.14affected
Jira Server and Data CenterAtlassian / Jira Server and Data Center>= unspecified, < 7.13.5affected
Jira Server and Data CenterAtlassian / Jira Server and Data Center>= unspecified, < 8.0.3affected
Jira Server and Data CenterAtlassian / Jira Server and Data Center>= unspecified, < 8.1.2affected