CVE-2017-18103

The atlassian-http library, as used in various Atlassian products, before version 2.0.2 allows remote attackers to spoof web content in the Mozilla Firefox Browser through uploaded files that have a content-type of application/mathml+xml.

Score

CVSS 3.0 4.7 Medium

Status

Modified - security@atlassian.com

Published

2018-07-18

Last modified

2024-09-17

Weaknesses

CWE-20

Affected products

• Atlassian-http (Atlassian)
• Http Library (Atlassian)

References

• https://jira.atlassian.com/browse/HTTP-3