{"uuid": "5f1b75c7-cbb5-4fd6-a467-da3ba680fabb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11580", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/atlassian_crowd_pdkinstall_plugin_upload_rce.rb", "content": "{\"aliases\": [], \"arch\": \"java\", \"author\": [\"Paul\", \"Corben Leo\", \"Grant Willcox\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module can be used to upload a plugin on Atlassian Cloud via\\n          the pdkinstall development plugin as an unauthenticated attacker.\\n          The payload is uploaded as a JAR archive containing a servlet using\\n          a POST request to /crowd/admin/uploadplugin.action. The check command will\\n          check that the /crowd/admin/uploadplugin.action page exists and that it\\n          responds appropriately to determine if the target is vulnerable or not.\", \"disclosure_date\": \"2019-05-22\", \"fullname\": \"exploit/multi/http/atlassian_crowd_pdkinstall_plugin_upload_rce\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"Atlassian Crowd pdkinstall Unauthenticated Plugin Upload RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/atlassian_crowd_pdkinstall_plugin_upload_rce.rb\", \"platform\": \"Java\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/atlassian_crowd_pdkinstall_plugin_upload_rce\", \"references\": [\"CVE-2019-11580\", \"URL-https://jira.atlassian.com/browse/CWD-5388\", \"URL-https://confluence.atlassian.com/crowd/crowd-security-advisory-2019-05-22-970260700.html\", \"URL-https://www.corben.io/atlassian-crowd-rce/\"], \"rport\": 8095, \"session_types\": false, \"targets\": [\"Java Universal\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:42.022092Z"}