Exploitation Summary
EIP tracks 2 public exploits for CVE-2014-2314.
PoCs published by Metasploit, Philippe Arteau, juan vazquez, including Metasploit module exploits/windows/http/jira_collector_traversal.
AI-analyzed exploit summary This Metasploit module exploits a directory traversal vulnerability in JIRA 6.0.3 to achieve remote code execution on Windows systems. It uploads a malicious JSP file via a traversal path and executes it to drop and run a payload.
Description
Directory traversal vulnerability in the Issue Collector plugin in Atlassian JIRA before 6.0.4 allows remote attackers to create arbitrary files via unspecified vectors.
Exploits (2)
This Metasploit module exploits a directory traversal vulnerability in JIRA 6.0.3 to achieve remote code execution on Windows systems. It uploads a malicious JSP file via a traversal path and executes it to drop and run a payload.
This Metasploit module exploits a directory traversal vulnerability in JIRA 6.0.3 to achieve remote code execution on Windows systems. It uploads a malicious JSP file via a traversal flaw in the issues collector attachment handling, then executes it to drop and run a payload.