CVE-2017-18110

The Atlassian Crowd CVE-2017-18110 affects the administration backup restore resource and allows remote attackers to read files from the filesystem via a XXE vulnerability. Affected versions are before 3.0.2 and before 3.1.1 (specifically 3.1.0 to 3.1.1). Exploitation is described as remote, over...