TI-2018-04164 CVE-2018-5758 · GHSA-gq66-wmx6-v7rgThe Upload File functionality in upload.jspa in Aurea Jive Jive-n 9.0.2.1 On-Premises…Priority LOW 34The Upload File functionality in upload.jspa in Aurea Jive Jive-n 9.0.2.1 On-Premises allows for an XML External Entity attack through a crafted file, allowing attackers to read arbitrary files.CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03022 · Published 2018-03-12 · No fix listed CWE-611