Lucene search
PRIOn knowledge basePRION:CVE-2019-10100HistoryJul 03, 2019 - 7:15 p.m.
Code injection
2019-07-0319:15:00
PRIOn knowledge base
www.prio-n.com
12
In JetBrains YouTrack Confluence plugin versions before 1.8.1.3, it was possible to achieve Server Side Template Injection. The attacker could add an Issue macro to the page in Confluence, and use a combination of a valid id field and specially crafted code in the link-text-template field to execute code remotely.
| CPE | Name | Operator | Version |
|---|---|---|---|
| youtrack_integration | lt | 1.8.1.3 |
Related
nvd
nvd
CVE-2019-10100
2019-07-03 19:15:12
cvelist
cvelist
CVE-2019-10100
2019-07-03 18:15:32
cve
cve
CVE-2019-10100
2019-07-03 19:15:12
jetbrains
jetbrains
JetBrains Security Bulletin Q1 2019
2019-06-19 00:00:00