We have identified and fixed a persistent cross-site scripting (XSS) vulnerabilities that affects Stash instances, including publicly available instances (that is, Internet-facing servers). XSS vulnerabilities allow an attacker to embed their own JavaScript into a Stash page.
More information is available in advisory at https://confluence.atlassian.com/display/STASH/Stash+security+advisory+2012-09-04
- mentioned in
-
Page No Confluence page found with the given URL.
-
Page No Confluence page found with the given URL.
-
Page No Confluence page found with the given URL.
-
Page No Confluence page found with the given URL.
-
Page No Confluence page found with the given URL.
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Page Loading...
-
Wiki Page Loading...
-
Wiki Page Loading...
[BSERV-2676] Persistent Cross Site Scripting Vulnerability
Remote Link | Original: This issue links to "Page (Atlassian Documentation)" [ 284765 ] |
Workflow | Original: Stash Workflow - Restricted [ 1447414 ] | New: JAC Bug Workflow v3 [ 3136791 ] |
Remote Link | Original: This issue links to "Page (Atlassian Documentation)" [ 274009 ] |
Remote Link | Original: This issue links to "Page (Atlassian Documentation)" [ 284765 ] | New: This issue links to "Page (Atlassian Documentation)" [ 284765 ] |
Remote Link | New: This issue links to "Page (Atlassian Documentation)" [ 284765 ] |
Remote Link | Original: This issue links to "Page (Atlassian Documentation)" [ 274009 ] | New: This issue links to "Page (Atlassian Documentation)" [ 274009 ] |
Remote Link | New: This issue links to "Page (Atlassian Documentation)" [ 274009 ] |
Remote Link | Original: This issue links to "Page (Atlassian Documentation)" [ 261624 ] | New: This issue links to "Page (Atlassian Documentation)" [ 261624 ] |
Remote Link | New: This issue links to "Page (Atlassian Documentation)" [ 261624 ] |
Remote Link | Original: This issue links to "Page (Atlassian Documentation)" [ 252547 ] | New: This issue links to "Page (Atlassian Documentation)" [ 252547 ] |