CVE-2012-2928 | BDVDB-2026-50301 Detail
Description#
The Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for Atlassian Confluence, does not properly restrict the capabilities of third-party XML parsers, which allows remote attackers to read arbitrary files or cause a denial of service (resource consumption) via unspecified vectors.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://secunia.com/advisories/49166
- http://confluence.atlassian.com/display/DOC/Confluence+Security+Advisory+2012-05-17
- http://osvdb.org/81993
- http://www.securityfocus.com/bid/53595
- http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2012-05-17
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75697
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.