Skip to main content

Gliffy

1 CVEs product

Monthly

CVE-2012-2928 May 22, 15:55 MEDIUM This Month

The Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for Atlassian Confluence, does not properly restrict the capabilities of third-party XML parsers, which allows remote attackers to. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Denial Of Service Jira Atlassian Confluence Server +1
NVD
CVSS 2.0
6.4
EPSS
1.9%
EPSS 2% CVSS 6.4
MEDIUM This Month

The Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for Atlassian Confluence, does not properly restrict the capabilities of third-party XML parsers, which allows remote attackers to. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation Denial Of Service Jira +3
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy