Vulnerability Bulletins

CVE-2019-20104

   
Affected software ATLASSIAN
 
The OpenID client application in Atlassian Crowd before version 3.6.2, and from version 3.7.0 before 3.7.1 allows remote attackers to perform a Denial of Service attack via an XML Entity Expansion vulnerability.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2019-20104