High severity7.5NVD Advisory· Published Aug 7, 2019· Updated Jun 17, 2026
CVE-2018-14383
CVE-2018-14383
Description
The Transition Technologies "The Scheduler" app 5.1.3 for Jira allows XXE due to a weakly configured/parameterized XML parser. It was fixed in the versions 5.2.1 and 3.3.7
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:ttpsc:the_scheduler:5.1.3:*:*:*:*:jira:*:*
- Transition Technologies/The Scheduler app for Jiradescription
- Range: <=5.1.3, !=5.2.1, !=3.3.7
Patches
Vulnerability mechanics
References
2- marketplace.atlassian.com/apps/37456/the-schedulernvdThird Party Advisory
- www.compass-security.com/fileadmin/Datein/Research/Advisories/CSNC-2018-022_jira_plugin_the_scheduler.txtnvdThird Party Advisory
News mentions
0No linked articles in our index yet.