description: The atlassian-http library, as used in various Atlassian products, before version 2.0.2 allows remote attackers to spoof web content in the Mozilla Firefox Browser through uploaded files that have a content-type of application/mathml+xml.
problem types: Content Spoofing
affected:
{
product: atlassian-http
vendor: Atlassian
versions:
lessThan: 2.0.2, status: affected, version: unspecified, versionType: custom
}