Uploaded image for project: 'Confluence Cloud'
  1. Confluence Cloud
  2. CONFCLOUD-25873 Various persistent-xss vulnerabilities in attachment downloads
  3. CONFCLOUD-25544

persistent xss through flash swf file attachment download

XMLWordPrintable

      It is possible to upload a flash swf file which when the attachment 'download' url is visited the flash swf file is executed in the browser and as such can use ExternalInterface.call() method to inject javascript defined in the swf file into the browser.

        1. CONF_25541.as
          0.4 kB
          David Black
        2. CONF_25541.swf
          0.6 kB
          David Black

              Unassigned Unassigned
              dblack David Black
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: