CVE-2018-14383

ALTO 7.5CVE-2018-14383 · Published 07/08/2019 · updated 17/06/2026

In breve

CVE-2018-14383 è una vulnerabilità ALTO (CVSS 7.5) che riguarda the scheduler (ttpsc).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.5%, superiore al 74.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
the scheduler ttpsc	`= 5.1.3`	No fix yet

Description

The Transition Technologies "The Scheduler" app 5.1.3 for Jira allows XXE due to a weakly configured/parameterized XML parser. It was fixed in the versions 5.2.1 and 3.3.7

References

marketplace.atlassian.com/apps/37456/the-scheduler · Third Party Advisory
compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2018-022_jira_plugin_the_scheduler.txt · Third Party Advisory

Altre vulnerabilità di the scheduler

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free