VULNERABILITY INTELLIGENCE

CVE-2017-18103

CVSS score4.7 MEDIUM
EPSS probability0.83%
CISA KEVNot currently listed
Published2018-07-18
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Description

The atlassian-http library, as used in various Atlassian products, before version 2.0.2 allows remote attackers to spoof web content in the Mozilla Firefox Browser through uploaded files that have a content-type of application/mathml+xml.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references