CVE-2019-11581

KEV

Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability

View CVE record →

Vendor / Project: Atlassian
Product: Jira Server and Data Center
Date added: Mar 7, 2022
Due date: Sep 7, 2022
Known ransomware use: Unknown
CWEs: CWE-74

Description

Atlassian Jira Server and Data Center contain a server-side template injection vulnerability which can allow for remote code execution.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-11581