CVE-2017-18111

CVE-2017-18111 describes an XML External Entity (XXE) vulnerability within the OAuthHelper component of Atlassian Application Links, affecting versions before 5.0.10, 5.1.0 through 5.1.2, and 5.2.0 through 5.2.5. This flaw allows a highly privileged, malicious OAuth application to probe internal network resources, read file contents, and trigger denial-of-service via an out-of-memory exception. Rated with a CVSS score of 8.7 (HIGH), the vulnerability has a network attack vector and low attack complexity, posing a significant risk to confidentiality and availability. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.