Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-15883

XSS in concurrent edit notification

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Medium Medium
    • 3.0-rc1
    • 3.0-beta3
    • None

      If a page is being editted by 

      <script>alert('hacked')</script>

      and another user edits it at the same time, they are vulnerable to a potential XSS attack.

        1. page-editor-210-patched.js
          24 kB
        2. page-editor-29-patched.js
          22 kB

            [CONFSERVER-15883] XSS in concurrent edit notification

            No work has yet been logged on this issue.

              cmiller CharlesA
              alynch Andrew Lynch (Inactive)
              Affected customers:
              0 This affects my team
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: