CVE-2018-20233

The Upload add-on resource in Atlassian Universal Plugin Manager before version 2.22.14 allows remote attackers who have system administrator privileges to…

published January 18, 2019

CVSS
—
EPSS
2%
Percentile
78.6
In the wild
Unconfirmed
What it is

The Upload add-on resource in Atlassian Universal Plugin Manager before version 2.22.14 allows remote attackers who have system administrator privileges to read files, make network requests and perform a denial of service attack via an XML External Entity vulnerability in the parsing of atlassian plugin xml files in an uploaded JAR.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01818 · 78.6th percentile
Published
2019-01-18T21:00Z
EPSS history
Timeline
  • 18 JAN 21:00Z
    The Upload add-on resource in Atlassian Universal Plugin Manager before version 2.22.14 allows remote attackers who have system administrator privileges to…
    cvelistv5