CVE-2014-2314

MEDIUM 4.3CVE-2014-2314 · Published 09/03/2014 · updated 17/06/2026

Package	Affected versions	Patched versions
jira atlassian	`= 6.0= 6.0.1= 6.0.2≤ 6.0.3`	No fix yet

Description

Directory traversal vulnerability in the Issue Collector plugin in Atlassian JIRA before 6.0.4 allows remote attackers to create arbitrary files via unspecified vectors.

References

blog.h3xstream.com/2014/02/jira-path-traversal-explained.html · Exploit
exploit-db.com/exploits/32725 · Exploit
confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2014-02-26 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free