Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2018-20233
HistoryJan 18, 2019 - 9:29 p.m.

Xxe

2019-01-1821:29:00
PRIOn knowledge base
www.prio-n.com
2

6.4 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.3%

JSON

The Upload add-on resource in Atlassian Universal Plugin Manager before version 2.22.14 allows remote attackers who have system administrator privileges to read files, make network requests and perform a denial of service attack via an XML External Entity vulnerability in the parsing of atlassian plugin xml files in an uploaded JAR.

CPENameOperatorVersion
universal_plugin_managerlt2.22.14

Related

cvelist 1
atlassian 4
cve 1
nvd 1
cvelist
cvelist
CVE-2018-20233
2019-01-17 00:00:00
atlassian
atlassian
The bundled Atlassian Universal Plugin Manager plugin had a XXE issue - CVE-2018-20233
2018-08-07 04:20:40
The bundled Atlassian Universal Plugin Manager plugin had a XXE issue - CVE-2018-20233
2018-08-07 04:20:34
The bundled Atlassian Universal Plugin Manager plugin had a XXE issue - CVE-2018-20233
2018-08-07 04:20:40
cve
cve
CVE-2018-20233
2019-01-18 21:29:00
nvd
nvd
CVE-2018-20233
2019-01-18 21:29:00

6.4 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.3%

JSON
Related for PRION:CVE-2018-20233
cvelist1atlassian4cve1nvd1