CVE-2012-2928

The CVE-2012-2928 issue affects the Gliffy plugin for Atlassian JIRA (before 3.7.1) and Gliffy for Confluence (before 4.2). The root cause is improper restriction of third‑party XML parsers, enabling remote attackers to read arbitrary files or cause a denial of service via unspecified vectors. Th...