{"id":9059,"date":"2019-07-29T07:13:44","date_gmt":"2019-07-29T07:13:44","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=9059"},"modified":"2026-04-17T18:07:52","modified_gmt":"2026-04-17T18:07:52","slug":"atlassian-jira-unauthorized-template-injection-vulnerability-cve-2019-11581-threat-alert","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/atlassian-jira-unauthorized-template-injection-vulnerability-cve-2019-11581-threat-alert\/","title":{"rendered":"Atlassian Jira Unauthorized Template Injection Vulnerability (CVE-2019-11581) Threat Alert"},"content":{"rendered":"


\n<\/p>\n

1 Vulnerability Description<\/strong><\/h2>\n

Recently, the Jira vendor released a security advisory on a template injection vulnerability in Jira Server and Jira Data Center, which could cause remote code execution when either of the following conditions is met:<\/p>\n

    \n
  1. An SMTP server has been configured in Jira and the Contact Administrators Form is enabled.<\/li>\n
  2. An SMTP server has been configured in Jira and an attacker has “Jira Administrators” access.<\/li>\n<\/ol>\n

    <\/p>\n

    Jira is a project and issue tracking tool developed by Atlassian. It is widely used in such areas as bug tracking, customer service, requirement collection, process review, task tracking, project tracking, and agile management. The full-featured Jira is characterized by flexible configuration, ease of deployment, and diverse extensions. Considering its wide scope of application, users are advised to immediately check their installations for this vulnerability to nip the security risk in the bud.<\/p>\n

    Reference:<\/p>\n

    https:\/\/confluence.atlassian.com\/jira\/jira-security-advisory-2019-07-10-973486595.html<\/p>\n

    2 Scope of Impact<\/strong><\/h2>\n

    Affected Versions<\/strong><\/p>\n