EUVD-2018-6301

Malware in sbrugna...

CVE-2018-14383

The Transition Technologies "The Scheduler" app 5.1.3 for Jira allows XXE due to a weakly configured/parameterized XML parser. It was fixed in the versions 5.2.1 and 3.3.7...

Design/Logic Flaw

The Transition Technologies "The Scheduler" app 5.1.3 for Jira allows XXE due to a weakly configured/parameterized XML parser. It was fixed in the versions 5.2.1 and 3.3.7...

CVE-2018-14383

CVE-2018-14383 affects Transition Technologies “The Scheduler” app for Jira. The vulnerability is an XML External Entity (XXE) issue caused by a weakly configured/parameterized XML parser. Affected versions include 5.1.3, with fixes implemented in 5.2.1 (and 3.3.7 for Jira server installations). ...

CVE-2018-14383

The Transition Technologies "The Scheduler" app 5.1.3 for Jira allows XXE due to a weakly configured/parameterized XML parser. It was fixed in the versions 5.2.1 and 3.3.7...

PT-2019-9023

Name of the Vulnerable Software and Affected Versions Transition Technologies "The Scheduler" app version 5.1.3 Description The issue is related to a weakly configured XML parser, allowing XXE. Recommendations For version 5.1.3, update to version 5.2.1 or 3.3.7 to resolve the issue...