Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-15397

Instant Messenger Macro XSS Vector

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Medium Medium
    • 3.0
    • None
    • None

    • Server: QA-EAC 3.0-m9-r2
      OS: Mac OS X 10.5.6
      Browser: Safari 3.2.1 (5525.27.1)

      Markup
      {im:<script>alert('Behind you!')</script>|service=aim}


      For some reason, it doesn't like the Numa Numa iframe.

        1. impresence-plugin-2.5.jar
          828 kB

            [CONFSERVER-15397] Instant Messenger Macro XSS Vector

            Katherine Yabut made changes -
            Workflow Original: JAC Bug Workflow v3 [ 2880130 ] New: CONFSERVER Bug Workflow v4 [ 2988959 ]
            Owen made changes -
            Workflow Original: JAC Bug Workflow v2 [ 2780280 ] New: JAC Bug Workflow v3 [ 2880130 ]
            Status Original: Resolved [ 5 ] New: Closed [ 6 ]
            Owen made changes -
            Workflow Original: JAC Bug Workflow [ 2723786 ] New: JAC Bug Workflow v2 [ 2780280 ]
            Owen made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2386816 ] New: JAC Bug Workflow [ 2723786 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 [ 2284050 ] New: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2386816 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5.1 - TEMP [ 2224361 ] New: Confluence Workflow - Public Facing - Restricted v5 [ 2284050 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2178015 ] New: Confluence Workflow - Public Facing - Restricted v5.1 - TEMP [ 2224361 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 [ 1943475 ] New: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2178015 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v3 [ 1740774 ] New: Confluence Workflow - Public Facing - Restricted v5 [ 1943475 ]
            Katherine Yabut made changes -
            Workflow Original: CONF Bug Subtask WF (TEMP) [ 1701126 ] New: Confluence Workflow - Public Facing - Restricted v3 [ 1740774 ]

              alynch Andrew Lynch (Inactive)
              pdzwart PdZ (Inactive)
              Affected customers:
              0 This affects my team
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: