-
Bug
-
Resolution: Fixed
-
Medium
-
3.0
-
None
A user with username "><script>alert("foo")</script> that is linked to via [~username] markup results in script being executed.
Curiously, viewing the space homepage of that user results in a blank page.
This of course is prevented for public signup, but if the user gets created via other means, i.e. external user management, or via admin control panel then this is a valid point of attack
- is caused by
-
CONFSERVER-15945 Inconsistent validation of usernames between admin-added and public signup
-
- Closed
-
- relates to
-
CONFSERVER-15920 User Hover is not working for a username which contains plus characters
-
- Closed
-
[CONFSERVER-15970] XSS in user links
Workflow | Original: JAC Bug Workflow v3 [ 2884024 ] | New: CONFSERVER Bug Workflow v4 [ 2992251 ] |
Workflow | Original: JAC Bug Workflow v2 [ 2787324 ] | New: JAC Bug Workflow v3 [ 2884024 ] |
Status | Original: Resolved [ 5 ] | New: Closed [ 6 ] |
Workflow | Original: JAC Bug Workflow [ 2718168 ] | New: JAC Bug Workflow v2 [ 2787324 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2380000 ] | New: JAC Bug Workflow [ 2718168 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v5 [ 2270932 ] | New: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2380000 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v5.1 - TEMP [ 2216103 ] | New: Confluence Workflow - Public Facing - Restricted v5 [ 2270932 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2167618 ] | New: Confluence Workflow - Public Facing - Restricted v5.1 - TEMP [ 2216103 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v5 [ 1925980 ] | New: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2167618 ] |
Workflow | Original: Confluence Workflow - Public Facing - Restricted v3 [ 1727901 ] | New: Confluence Workflow - Public Facing - Restricted v5 [ 1925980 ] |
Workflow | Original: CONF Bug Subtask WF (TEMP) [ 1684355 ] | New: Confluence Workflow - Public Facing - Restricted v3 [ 1727901 ] |