CVE-2019-11580

This repository contains a functional exploit for CVE-2019-11580, targeting Atlassian Crowd's plugin upload functionality. The Python script sends a crafted multipart request to upload a malicious plugin, achieving remote code execution (RCE).

This repository contains a functional Python script that exploits CVE-2019-11580, a vulnerability in Atlassian Crowd. The script sends a crafted multipart request to the vulnerable endpoint to achieve remote code execution.

This repository contains functional exploit code for CVE-2019-11580, demonstrating remote code execution (RCE) via a malicious Atlassian Crowd plugin. The exploit involves uploading a plugin containing a servlet that executes arbitrary commands based on HTTP request parameters.

This Metasploit module exploits an unauthenticated plugin upload vulnerability in Atlassian Crowd (CVE-2019-11580) by uploading a malicious JAR file containing a servlet payload. The exploit leverages the pdkinstall development plugin to achieve remote code execution.