What is CVE-2017-18111?

CVE-2017-18111 is a high-severity vulnerability in Atlassian Application Links, classified under Improper Restriction of XML External Entity Reference (XXE). CVSS score: 8.7/10. Published 2019-03-29.

How severe is CVE-2017-18111?

High severity. CVSS v3 base score is 8.7 out of 10.

XXE in Atlassian Application Links

CVE-2017-18111

The OAuthHelper in Atlassian Application Links before version 5.0.10, from version 5.1.0 before version 5.1.3, and from version 5.2.0 before version 5.2.6 used an XML document builder that was vulnerable to XXE when consuming a client OAut…

Vulnerability class: XXE (XML External Entity)

EPSS: 0.016 (73.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.7 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:H.

Affected products

Atlassian Application Links — versions unspecified, 5.1.0, 5.2.0
Atlassian Application_links

Weakness classification (CWE)

CWE-611 — Improper Restriction of XML External Entity Reference (XXE)

References

security@atlassian.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2017-18111?: CVE-2017-18111 is a high-severity vulnerability in Atlassian Application Links, classified under Improper Restriction of XML External Entity Reference (XXE). CVSS score: 8.7/10. Published 2019-03-29.
How severe is CVE-2017-18111?: High severity. CVSS v3 base score is 8.7 out of 10.