-
Bug
-
Resolution: Fixed
-
High
-
2.10.3
-
None
You can create a space with HTML in the name. In most places this space name is correctly encoded however in the tree component given when you chose to move a page the destination space is name is not encoded properly.
To reproduce.
1) Create a space called <script>alert("Howdy");</script>
2) Create a page in another space
3) Move this new page, chosing the previously created space as the destination
4) You'll get a friendly 'Howdy' alert.
Because permissions can be set such that any user has space create permission this is a slightly greater problem than it might originally sound.
- relates to
-
CONFSERVER-16135 XSS vulnerability in space name when page move would create a duplicate
-
- Closed
-
[CONFSERVER-16019] XSS vulnerability when moving page between spaces
Workflow | Original: JAC Bug Workflow v3 [ 2890436 ] | New: CONFSERVER Bug Workflow v4 [ 3000742 ] |
Workflow | Original: JAC Bug Workflow v2 [ 2803050 ] | New: JAC Bug Workflow v3 [ 2890436 ] |
Status | Original: Resolved [ 5 ] | New: Closed [ 6 ] |
Workflow | Original: JAC Bug Workflow [ 2734411 ] | New: JAC Bug Workflow v2 [ 2803050 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2399820 ] | New: JAC Bug Workflow [ 2734411 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v5 [ 2298832 ] | New: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2399820 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v5.1 - TEMP [ 2233522 ] | New: Confluence Workflow - Public Facing - Restricted v5 [ 2298832 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2194917 ] | New: Confluence Workflow - Public Facing - Restricted v5.1 - TEMP [ 2233522 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v5 [ 1926006 ] | New: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2194917 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v3 [ 1727909 ] | New: Confluence Workflow - Public Facing - Restricted v5 [ 1926006 ] |
Workflow | Original: CONF Bug Subtask WF (TEMP) [ 1684379 ] | New: Confluence Workflow - Public Facing - Restricted v3 [ 1727909 ] |