Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-15402

XSS vulnerability can be exploited with the viewppt macro

XMLWordPrintable

      Upload a file test.ppt

      Use markup:

      {viewppt:test.ppt|height=<script>alert("xss")</script>|width=<script>alert("xss")</script>}

      The scripts will be executed when the page is loaded.

          Form Name

            [CONFSERVER-15402] XSS vulnerability can be exploited with the viewppt macro

            Katherine Yabut made changes -
            Workflow Original: JAC Bug Workflow v3 [ 2876569 ] New: CONFSERVER Bug Workflow v4 [ 2983219 ]
            Owen made changes -
            Workflow Original: JAC Bug Workflow v2 [ 2776506 ] New: JAC Bug Workflow v3 [ 2876569 ]
            Status Original: Resolved [ 5 ] New: Closed [ 6 ]
            Owen made changes -
            Workflow Original: JAC Bug Workflow [ 2712828 ] New: JAC Bug Workflow v2 [ 2776506 ]
            Owen made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2378379 ] New: JAC Bug Workflow [ 2712828 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 [ 2268064 ] New: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2378379 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5.1 - TEMP [ 2214954 ] New: Confluence Workflow - Public Facing - Restricted v5 [ 2268064 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2165489 ] New: Confluence Workflow - Public Facing - Restricted v5.1 - TEMP [ 2214954 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 [ 1922254 ] New: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2165489 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v3 [ 1725323 ] New: Confluence Workflow - Public Facing - Restricted v5 [ 1922254 ]
            Katherine Yabut made changes -
            Workflow Original: CONF Bug Subtask WF (TEMP) [ 1680316 ] New: Confluence Workflow - Public Facing - Restricted v3 [ 1725323 ]

              mjensen m@ (Inactive)
              mhrynczak Mark Hrynczak (Inactive)
              Affected customers:
              0 This affects my team
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: