This security advisory describes one medium risk vulnerability.
CWE-254 - Security Features
Exploit availability: NoDescription
The vulnerability allows a remote attacker to bypass security rescrictions on the target system.
The vulnerability exists due to a template injection flaw. A remote authenticated attacker can read and render files as mustache templates in files inside the WEB-INF/classes &
Install updates from vendor's website.Vulnerable software versions
Automation for Jira: before 7.1.15CPE
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.