CVE-2015-5603 The HipChat for JIRA plugin before 6.30.0 for Atlassian JIRA allows remote authenticated users to execute arbitrary Java code via unspecified vectors, related to "Velocity Template Injection Vulnerabi...
MediumCVSS 6.5
EPSS 59.3%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The HipChat for JIRA plugin before 6.30.0 for Atlassian JIRA allows remote authenticated users to execute arbitrary Java code via unspecified vectors, related to "Velocity Template Injection Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| atlassian hipchat | <= 6.29.2 | No fix listed |
References
- packetstormsecurity.com
- www.rapid7.com
- 20150902 CVE-2015-5603: JIRA and the HipChat For JIRA plugin - Velocity Template Injection mailing-list
- confluence.atlassian.com vendor-advisory
- 38551 exploit
- 38905 exploit