Exploitation Summary
EIP tracks 3 public exploits for CVE-2015-5603.
PoCs published by Metasploit, Chris Wood, Chris Wood, sinn3r, including Metasploit module exploits/multi/http/jira_hipchat_template.
AI-analyzed exploit summary This Metasploit module exploits a Velocity template injection vulnerability in Atlassian HipChat for Jira, allowing remote code execution as the Jira user. It supports multiple platforms (Java, Windows, Linux) and includes both active and passive checks for vulnerability verification.
Description
The HipChat for JIRA plugin before 6.30.0 for Atlassian JIRA allows remote authenticated users to execute arbitrary Java code via unspecified vectors, related to "Velocity Template Injection Vulnerability."
Exploits (3)
This Metasploit module exploits a Velocity template injection vulnerability in Atlassian HipChat for Jira, allowing remote code execution as the Jira user. It supports multiple platforms (Java, Windows, Linux) and includes both active and passive checks for vulnerability verification.
This exploit leverages a Velocity Template Injection vulnerability in JIRA and the HipChat for JIRA plugin to execute arbitrary commands as the Tomcat user. It sends a malicious payload via a REST API endpoint, requiring an authenticated session.
This Metasploit module exploits a Velocity template injection vulnerability in Atlassian HipChat for Jira, allowing authenticated users to execute arbitrary Java code. It supports multiple payload types (Java, Windows, Linux) and includes both active and passive checks for vulnerability verification.