• Type: Bug
• Resolution: Fixed
• Priority: Medium
• Fix Version/s: 2.10.2
• Affects Version/s: None
• Component/s: None
• Labels:

  • security

1. atlassian-seraph-0.38.3.jar

   146 kB

   17/Feb/2009 4:31 AM

[CONFSERVER-14275] HTTP Header Injection vulnerability: os_destination value not properly escaped when used as redirect location

Collapse comment: Andrew Lynch (Inactive) added a comment - 17/Feb/2009 4:34 AM, Edited by Giles Gaskell [Atlassian] - 18/Feb/2009 3:11 AM

Andrew Lynch (Inactive) added a comment - 17/Feb/2009 4:34 AM - edited

Instructions for installing the patch

Attached to this JIRA issue is the patched jar file that will correct this problem.

Simply remove the existing atlassian-seraph-0.38-<version>.jar file from your WEB-INF/lib folder and replace it with the atlassian-seraph-0.38.3.jar file attached to this JIRA issue.

Note: You will need to restart your application server running Confluence for this patch to take effect.

This patch should be compatible with Confluence 2.8.2 upwards.

Regards,
Andrew Lynch

Expand comment: Andrew Lynch (Inactive) added a comment - 17/Feb/2009 4:34 AM, Edited by Giles Gaskell [Atlassian] - 18/Feb/2009 3:11 AM

Andrew Lynch (Inactive) added a comment - 17/Feb/2009 4:34 AM - edited Instructions for installing the patch Attached to this JIRA issue is the patched jar file that will correct this problem. Simply remove the existing atlassian-seraph-0.38-<version>.jar file from your WEB-INF/lib folder and replace it with the atlassian-seraph-0.38.3.jar file attached to this JIRA issue. Note: You will need to restart your application server running Confluence for this patch to take effect. This patch should be compatible with Confluence 2.8.2 upwards. Regards, Andrew Lynch

Collapse comment: Matt Ryall added a comment - 17/Feb/2009 4:18 AM

Matt Ryall added a comment - 17/Feb/2009 4:18 AM

Andrew, we need a patch (new version of Seraph?) attached here for Confluence versions 2.8.x and 2.9.x.

Expand comment: Matt Ryall added a comment - 17/Feb/2009 4:18 AM

Matt Ryall added a comment - 17/Feb/2009 4:18 AM Andrew, we need a patch (new version of Seraph?) attached here for Confluence versions 2.8.x and 2.9.x.

Collapse comment: Matt Ryall added a comment - 23/Jan/2009 5:00 AM

Matt Ryall added a comment - 23/Jan/2009 5:00 AM

We should probably check with JIRA to see if they have an acceptance test we can use to test for this vulnerability in Confluence.

Expand comment: Matt Ryall added a comment - 23/Jan/2009 5:00 AM

Matt Ryall added a comment - 23/Jan/2009 5:00 AM We should probably check with JIRA to see if they have an acceptance test we can use to test for this vulnerability in Confluence.