Description (CNA)
The Upload add-on resource in Atlassian Universal Plugin Manager before version 2.22.14 allows remote attackers who have system administrator privileges to read files, make network requests and perform a denial of service attack via an XML External Entity vulnerability in the parsing of atlassian plugin xml files in an uploaded JAR.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Atlassian / Universal Plugin Manager | affected unspecified before 2.22.14 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.