Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-15440

XSS vulnerability can be exploited with the contentbylabel macro

XMLWordPrintable

      Use markup:

      {contentbylabel:labels=foo|title=<script>alert('Vulnerable')</script>}

      The script will be executed when the page is viewed.

        1. confluence-advanced-macros-1.5.3.5.jar
          128 kB
          David Taylor

            [CONFSERVER-15440] XSS vulnerability can be exploited with the contentbylabel macro

            Katherine Yabut made changes -
            Workflow Original: JAC Bug Workflow v3 [ 2881922 ] New: CONFSERVER Bug Workflow v4 [ 2977858 ]
            Owen made changes -
            Workflow Original: JAC Bug Workflow v2 [ 2783275 ] New: JAC Bug Workflow v3 [ 2881922 ]
            Status Original: Resolved [ 5 ] New: Closed [ 6 ]
            Owen made changes -
            Workflow Original: JAC Bug Workflow [ 2708787 ] New: JAC Bug Workflow v2 [ 2783275 ]
            Owen made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2373633 ] New: JAC Bug Workflow [ 2708787 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 [ 2258744 ] New: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2373633 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5.1 - TEMP [ 2209704 ] New: Confluence Workflow - Public Facing - Restricted v5 [ 2258744 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2155482 ] New: Confluence Workflow - Public Facing - Restricted v5.1 - TEMP [ 2209704 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 [ 1910932 ] New: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2155482 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v3 [ 1718264 ] New: Confluence Workflow - Public Facing - Restricted v5 [ 1910932 ]
            Katherine Yabut made changes -
            Workflow Original: CONF Bug Subtask WF (TEMP) [ 1669868 ] New: Confluence Workflow - Public Facing - Restricted v3 [ 1718264 ]

              Unassigned Unassigned
              mhrynczak Mark Hrynczak (Inactive)
              Affected customers:
              0 This affects my team
              Watchers:
              0 Start watching this issue

                Created:
                Updated:
                Resolved: