CVE-2017-18103

The CVE-2017-18103 entry concerns the bundled atlassian-http library used by Atlassian products. The vulnerability arises in versions before 2.0.2, where uploaded files with Content-Type: application/mathml+xml can cause remote attackers to spoof web content in Mozilla Firefox. Impact is content ...