CVE-2018-20233


01/18/2019

CVE-2018-20233

The Upload add-on resource in Atlassian Universal Plugin Manager before version 2.22.14 allows remote attackers who have system administrator privileges to read files, make network requests and perform a denial of service attack via an XML External Entity vulnerability in the parsing of atlassian plugin xml files in an uploaded JAR.

References: 
https://ecosystem.atlassian.net/browse/UPM-5964



Don't forget to share

You may also like...

Leave a Reply

Your email address will not be published. Required fields are marked *