Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-11585

Mailbox Import errors not escaped

    XMLWordPrintable

Details

    Description

      • Go to "SpaceAdmin"
      • Select "Mailbox Import"
      • Specify location of mbox file on server with the XSS code, e.g. <script>alert('XSS')</script>
      • Submit the form
      • The embedded JavaScript is executed

      Attachments

        Activity

          People

            cbroadfoot Chris Broadfoot [Atlassian]
            Anonymous Anonymous
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: