CVE-2018-5758

The Upload File functionality in upload.jspa in Aurea Jive Jive-n 9.0.2.1 On-Premises allows for an XML External Entity attack through a crafted file, allowing…

published March 12, 2018

CVSS
—
EPSS
3%
Percentile
87.4
In the wild
Unconfirmed
What it is

The Upload File functionality in upload.jspa in Aurea Jive Jive-n 9.0.2.1 On-Premises allows for an XML External Entity attack through a crafted file, allowing attackers to read arbitrary files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03022 · 87.4th percentile
Published
2018-03-12T21:00Z
EPSS history
Timeline
  • 12 MAR 21:00Z
    The Upload File functionality in upload.jspa in Aurea Jive Jive-n 9.0.2.1 On-Premises allows for an XML External Entity attack through a crafted file, allowing…
    cvelistv5