CVE-2014-2313: Path Traversal
Published Mar 7, 2014
·Updated
Directory traversal vulnerability in the Importers plugin in Atlassian JIRA before 6.0.5 allows remote attackers to create arbitrary files via unspecified vectors.
Affected Software
12 affected components
Atlassian Jira<=6.0.4
Atlassian Jira=6.0
Atlassian Jira=6.0.1
Atlassian Jira=6.0.2
Atlassian Jira=6.0.3
Microsoft Windows
All of the following
Any of the following
Atlassian Jira<=6.0.4
Atlassian Jira=6.0
Atlassian Jira=6.0.1
Atlassian Jira=6.0.2
Atlassian Jira=6.0.3
Microsoft Windows
Event History
Mar 7, 2014
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Mar 9, 2014
Data Sourced
via NVD·01:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-2313?
CVE-2014-2313 is classified as a medium severity vulnerability.
2
How do I fix CVE-2014-2313?
To fix CVE-2014-2313, upgrade Atlassian JIRA to version 6.0.5 or later.
3
Which versions of Atlassian JIRA are affected by CVE-2014-2313?
CVE-2014-2313 affects Atlassian JIRA versions prior to 6.0.5, including versions 6.0.1, 6.0.2, 6.0.3, and 6.0.4.
4
What type of vulnerability is CVE-2014-2313?
CVE-2014-2313 is a directory traversal vulnerability.
5
Can CVE-2014-2313 be exploited by remote attackers?
Yes, remote attackers can exploit CVE-2014-2313 to create arbitrary files.