What’s Vulnerable › Vulnerabilities

CVE-2019-9005

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-04-18 · updated 2026-06-17
• Weakness: CWE-22

Description

The Cprime Power Scripts app before 4.0.14 for Atlassian Jira allows Directory Traversal.

Affected products

• Cprime Power Scripts: before 4.0.14 — fixed in 4.0.14

How to fix

Upgrade to a fixed version: Cprime Power Scripts 4.0.14. Check the vendor advisory for mitigations.

References

• https://marketplace.atlassian.com/apps/43318/power-scripts-jira-script-automation/version-history
• https://www.detack.de/en/cve-2019-9005
• https://marketplace.atlassian.com/apps/43318/power-scripts-jira-script-automation/version-history
• https://www.detack.de/en/cve-2019-9005

Get alerted when CVE-2019-9005 or the next vulnerability affects your stack