CVE-2018-17186

Publication date

2018-11-06 21:00:00

Family

apache

State

PUBLISHED

Description

An administrator with workflow definition entitlements can use DTD to perform malicious operations, including but not limited to file read, file write, and code execution.