Atlassian JIRA FishEye and Crucible Plugins XML Parsing Unspecified Security Vulnerability

  1. Network Vulnerabilities
  2. Web application abuses
  3. Atlassian JIRA FishEye and Crucible Plugins XML Parsing Unspecified Security Vulnerability
Summary
The FishEye and Crucible plugins for JIRA are prone to an unspecified security vulnerability because they fail to properly handle crafted XML data. Exploiting this issue allows remote attackers to cause denial-of- service conditions or to disclose local sensitive files in the context of an affected application. FishEye and Crucible versions up to and including 2.7.11 are vulnerable.
Solution
Updates are available. Please see the references for more information.
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities