CVE-2012-2928

2012-05-2215:00:00

mitre

www.cve.org

9.1 High

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.8%

JSON

The Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for Atlassian Confluence, does not properly restrict the capabilities of third-party XML parsers, which allows remote attackers to read arbitrary files or cause a denial of service (resource consumption) via unspecified vectors.