Uploaded image for project: 'Confluence Cloud'
  1. Confluence Cloud
  2. CONFCLOUD-51825

XSS Vulnerability in wiki markup

XMLWordPrintable

      NOTE: This bug report is for Confluence Cloud. Using Confluence Server? See the corresponding bug report.

      Luke Jahnke of the Australia Post Digital Mailbox Security Team reported to Atlassian an XSS in nesting various markup.

          Form Name

            [CONFCLOUD-51825] XSS Vulnerability in wiki markup

            David Black added a comment -

            CVSS score: 5.5 => Medium severity

            Exploitability Metrics

            AccessVector Network
            AccessComplexity Low
            Authentication Single

            Impact Metrics

            ConfImpact Partial
            IntegImpact Partial
            AvailImpact None

            David Black added a comment - CVSS score: 5.5 => Medium severity Exploitability Metrics AccessVector Network AccessComplexity Low Authentication Single Impact Metrics ConfImpact Partial IntegImpact Partial AvailImpact None

              Unassigned Unassigned
              ca3d894a75c2 Luke Jahnke
              Affected customers:
              0 This affects my team
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: