Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5g25-2vp3-jgg2

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The TM Software Tempo plugin before 6.4.3.1, 6.5.x before 6.5.0.2, and 7.x before 7.0.3 for Atlassian JIRA does not properly restrict the capabilities of third-party XML parsers, which allows remote authenticated users to cause a denial of service (resource consumption) via unspecified vectors.

The TM Software Tempo plugin before 6.4.3.1, 6.5.x before 6.5.0.2, and 7.x before 7.0.3 for Atlassian JIRA does not properly restrict the capabilities of third-party XML parsers, which allows remote authenticated users to cause a denial of service (resource consumption) via unspecified vectors.

EPSS

Процентиль: 69%
0.00621
Низкий

Связанные уязвимости

nvd
около 13 лет назад

The TM Software Tempo plugin before 6.4.3.1, 6.5.x before 6.5.0.2, and 7.x before 7.0.3 for Atlassian JIRA does not properly restrict the capabilities of third-party XML parsers, which allows remote authenticated users to cause a denial of service (resource consumption) via unspecified vectors.

EPSS

Процентиль: 69%
0.00621
Низкий