Unrated severityNVD Advisory· Published May 22, 2012· Updated Apr 29, 2026
CVE-2012-2928
CVE-2012-2928
Description
The Gliffy plugin before 3.7.1 for Atlassian JIRA, and before 4.2 for Atlassian Confluence, does not properly restrict the capabilities of third-party XML parsers, which allows remote attackers to read arbitrary files or cause a denial of service (resource consumption) via unspecified vectors.
Affected products
28cpe:2.3:a:gliffy:gliffy:2.0.1:*:*:*:*:*:*:*+ 25 more
- cpe:2.3:a:gliffy:gliffy:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:gliffy:gliffy:2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:gliffy:gliffy:2.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:gliffy:gliffy:2.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:gliffy:gliffy:*:*:*:*:*:*:*:*range: <=3.7
- cpe:2.3:a:gliffy:gliffy:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:gliffy:gliffy:2.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:gliffy:gliffy:2.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:gliffy:gliffy:2.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:gliffy:gliffy:2.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:gliffy:gliffy:2.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:gliffy:gliffy:3.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:gliffy:gliffy:3.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:gliffy:gliffy:3.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:gliffy:gliffy:3.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:gliffy:gliffy:3.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:gliffy:gliffy:3.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:gliffy:gliffy:3.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:gliffy:gliffy:3.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:gliffy:gliffy:3.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:gliffy:gliffy:3.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:gliffy:gliffy:3.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:gliffy:gliffy:3.5:*:*:*:*:*:*:*
- cpe:2.3:a:gliffy:gliffy:3.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:gliffy:gliffy:3.6:*:*:*:*:*:*:*
- cpe:2.3:a:gliffy:gliffy:3.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:atlassian:confluence_server:4.1.9:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- confluence.atlassian.com/display/DOC/Confluence+Security+Advisory+2012-05-17nvdMitigationVendor Advisory
- confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2012-05-17nvdMitigationVendor Advisory
- secunia.com/advisories/49166nvdVendor Advisory
- www.securityfocus.com/bid/53595nvdBroken LinkThird Party AdvisoryVDB Entry
- exchange.xforce.ibmcloud.com/vulnerabilities/75697nvdThird Party AdvisoryVDB Entry
- osvdb.org/81993nvdBroken Link
News mentions
0No linked articles in our index yet.