Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-10289

Security vulnerability with Dashboard spacesSelectedTab

XMLWordPrintable

      Our security team has reported the following vulnerability, which must be resolved for us to use the application.

      > Severity: High
      > Test Type: Application
      > Vulnerable URL: https://gforgewiki.nci.nih.gov/dashboard.action
      > (Parameter =
      > spacesSelectedTab)
      > Remediation Tasks: Filter out hazardous characters from user input

        1. Appscan_highalert.rtf
          6 kB
          Mary Johnson
        2. RecentlyUpdatedContentMacro.class
          18 kB
          Paul Curren
        3. RecentlyUpdatedContentMacro.class
          18 kB
          Paul Curren
        4. RecentlyUpdatedContentMacro-2.6.diff
          1 kB
          Paul Curren

            [CONFSERVER-10289] Security vulnerability with Dashboard spacesSelectedTab

            Katherine Yabut made changes -
            Workflow Original: JAC Bug Workflow v3 [ 2901884 ] New: CONFSERVER Bug Workflow v4 [ 2996451 ]
            Owen made changes -
            Workflow Original: JAC Bug Workflow v2 [ 2798627 ] New: JAC Bug Workflow v3 [ 2901884 ]
            Status Original: Resolved [ 5 ] New: Closed [ 6 ]
            Owen made changes -
            Workflow Original: JAC Bug Workflow [ 2729152 ] New: JAC Bug Workflow v2 [ 2798627 ]
            Owen made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2394319 ] New: JAC Bug Workflow [ 2729152 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 [ 2289731 ] New: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2394319 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5.1 - TEMP [ 2228008 ] New: Confluence Workflow - Public Facing - Restricted v5 [ 2289731 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2184000 ] New: Confluence Workflow - Public Facing - Restricted v5.1 - TEMP [ 2228008 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 [ 1952520 ] New: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2184000 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v3 [ 1745655 ] New: Confluence Workflow - Public Facing - Restricted v5 [ 1952520 ]
            Katherine Yabut made changes -
            Workflow Original: CONF Bug Subtask WF (TEMP) [ 1707757 ] New: Confluence Workflow - Public Facing - Restricted v3 [ 1745655 ]

              pcurren Paul Curren
              43bd830fd92b Mary Johnson
              Affected customers:
              0 This affects my team
              Watchers:
              0 Start watching this issue

                Created:
                Updated:
                Resolved: