Atlassian Bamboo XML Parsing Unspecified Security Vulnerability
BID:53899
Info
Atlassian Bamboo XML Parsing Unspecified Security Vulnerability
| Bugtraq ID: | 53899 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 17 2012 12:00AM |
| Updated: | May 17 2012 12:00AM |
| Credit: | Reported by the vendor |
| Vulnerable: |
Atlassian Bamboo 3.4.4 |
| Not Vulnerable: |
Atlassian Bamboo 4.0.0 |
Discussion
Atlassian Bamboo XML Parsing Unspecified Security Vulnerability
Atlassian Bamboo is prone to an unspecified security vulnerability because it fails to properly handle crafted XML data.
Exploiting this issue allows remote attackers to cause denial-of-service conditions or to disclose local sensitive files in the context of an affected application.
Atlassian Bamboo is prone to an unspecified security vulnerability because it fails to properly handle crafted XML data.
Exploiting this issue allows remote attackers to cause denial-of-service conditions or to disclose local sensitive files in the context of an affected application.
Exploit / POC
Atlassian Bamboo XML Parsing Unspecified Security Vulnerability
An attacker can exploit this issue through a browser.
An attacker can exploit this issue through a browser.
References
Atlassian Bamboo XML Parsing Unspecified Security Vulnerability
References:
References:
- Bamboo Homepage (Atlassian)
- Bamboo XML Vulnerability (Atlassian)
- Bamboo Security Advisory 2012-05-17 (Atlassian)