CVE-2015-5603

CVE Database · CVE-2015-5603

CVE-2015-5603

· N/AModified

CVSS v3.1

N/A

EPSS

59.31%

Published

Sep 21, 2015

Modified

May 6, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBJIRA and HipChat for JIRA Plugin - Velocity Template Injection Exploit-DBAtlassian HipChat for Jira Plugin - Velocity Template Injection (Metasploit)TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The HipChat for JIRA plugin before 6.30.0 for Atlassian JIRA allows remote authenticated users to execute arbitrary Java code via unspecified vectors, related to "Velocity Template Injection Vulnerability."

Weaknesses (CWE)

CWE-94

Affected Products (1)

atlassian · hipchatvulnerable

References (12)

http://packetstormsecurity.com/files/133401/Jira-HipChat-For-Jira-Java-Code-Execution.html

http://www.rapid7.com/db/modules/exploit/multi/http/jira_hipchat_template

http://www.securityfocus.com/archive/1/536374/100/0/threaded

https://confluence.atlassian.com/jira/jira-and-hipchat-for-jira-plugin-security-advisory-2015-08-26-776650785.html

Vendor Advisory

https://www.exploit-db.com/exploits/38551/

https://www.exploit-db.com/exploits/38905/

http://packetstormsecurity.com/files/133401/Jira-HipChat-For-Jira-Java-Code-Execution.html

http://www.rapid7.com/db/modules/exploit/multi/http/jira_hipchat_template

http://www.securityfocus.com/archive/1/536374/100/0/threaded

https://confluence.atlassian.com/jira/jira-and-hipchat-for-jira-plugin-security-advisory-2015-08-26-776650785.html

KEV Catalog EPSS Scores Vendors All CVEs