VULNERABILITY INTELLIGENCE

CVE-2015-5603

CVSS score6.5 MEDIUM
EPSS probability59.31%
CISA KEVNot currently listed
Published2015-09-21
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P

Description

The HipChat for JIRA plugin before 6.30.0 for Atlassian JIRA allows remote authenticated users to execute arbitrary Java code via unspecified vectors, related to "Velocity Template Injection Vulnerability."

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references