CVE-2017-18103 The atlassian-http library, as used in various Atlassian products, before version 2.0.2 allows remote attackers to spoof web content in the Mozilla Firefox Browser through uploaded files that have a c...
MediumCVSS 4.7
EPSS 0.83%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The atlassian-http library, as used in various Atlassian products, before version 2.0.2 allows remote attackers to spoof web content in the Mozilla Firefox Browser through uploaded files that have a content-type of application/mathml+xml.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| atlassian http library | < 2.0.2 | 2.0.2 |
| atlassian-http | < 2.0.2 | 2.0.2 |
References
- jira.atlassian.com issue-tracking vendor-advisory