CoreCVE
Back

MEDIUM

The atlassian-http library, as used in various Atlassian products, before version 2.0.2 allows remote attackers to spoof web content in the Mozilla Firefox Browser through uploaded files that have a content-type of application/mathml+xml

Published Jul 18, 2018

Description

The atlassian-http library, as used in various Atlassian products, before version 2.0.2 allows remote attackers to spoof web content in the Mozilla Firefox Browser through uploaded files that have a content-type of application/mathml+xml.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner atlassian
Published Jul 18, 2018
Updated Sep 17, 2024
Reserved Feb 1, 2018
Link CVE-2017-18103

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2017-18103

Red Hat

No data

ENISA EUVD

Assigner atlassian
Published Jul 18, 2018
Updated Sep 17, 2024
Link EUVD-2017-9240

GitHub

No data