Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-17967

XSS vulnerability in pagetree and page macros

XMLWordPrintable

      To reproduce this issue:

      • create a user with username "><<script>alert('hahahaha')</script>
      • create a personal space for this user
      • create a page in the personal space with pagetree and/or pagetreesearch macro

      Note that confluence does not work very well with such usernames so you would need to use actions directly when creating/viewing pages in the user space.

            [CONFSERVER-17967] XSS vulnerability in pagetree and page macros

            No work has yet been logged on this issue.

              Unassigned Unassigned
              ggaskell Giles Gaskell [Atlassian]
              Affected customers:
              0 This affects my team
              Watchers:
              0 Start watching this issue

                Created:
                Updated:
                Resolved: