CVE-2017-18110

The administration backup restore resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers to read files from the filesystem via a XXE vulnerability.
References
Link Resource
https://jira.atlassian.com/browse/CWD-5070 Issue Tracking Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:*
cpe:2.3:a:atlassian:crowd:3.1.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-03-29 14:29

Updated : 2023-12-10 12:59


NVD link : CVE-2017-18110

Mitre link : CVE-2017-18110

CVE.ORG link : CVE-2017-18110


JSON object : View

Products Affected

atlassian

  • crowd
CWE
CWE-611

Improper Restriction of XML External Entity Reference