The TM Software Tempo plugin before 6.4.3.1, 6.5.x before 6.5.0.2, and 7.x before 7.0.3 for Atlassian JIRA does not properly restrict the capabilities of third-party XML parsers, which allows remote authenticated users to cause a denial of service (resource consumption) via unspecified vectors.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2012-05-22T15:00:00

Updated: 2024-08-06T19:50:05.230Z

Reserved: 2012-05-22T00:00:00

Link: CVE-2012-2927

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2012-05-22T15:55:02.900

Modified: 2024-11-21T01:39:57.370

Link: CVE-2012-2927

cve-icon Redhat

No data.