CVE-2010-1165: Atlassian Jira

High severity, CVSS 9.0. EPSS: 4.4% chance of exploitation in the next 30 days.

Atlassian JIRA 3.12 through 4.1 allows remote authenticated administrators to execute arbitrary code by modifying the (1) attachment (aka attachments), (2) index (aka indexing), or (3) backup path and then uploading a file, as exploited in the wild in April 2010.

Affected products

• Atlassian Jira: version 3.12 only; version 3.12.1 only; version 3.12.2 only; version 3.12.3 only; version 3.13 only; version 3.13.1 only; …

Published 2010-04-20. Last modified 2026-06-16.