Description
Atlassian JIRA 3.12 through 4.1 allows remote authenticated administrators to execute arbitrary code by modifying the (1) attachment (aka attachments), (2) index (aka indexing), or (3) backup path and then uploading a file, as exploited in the wild in April 2010.
References
- jira-pathsettings-priv-escalation(57828) vdb-entry
- http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2010-04-16
- http://jira.atlassian.com/browse/JRA-20995
- [oss-security] 20100416 CVE Request: JIRA Issues mailing-list
- [oss-security] 20100416 Re: CVE Request: JIRA Issues mailing-list
- 39353 third-party-advisory
- 39485 vdb-entry
- http://jira.atlassian.com/browse/JRA-21004