-
Bug
-
Resolution: Fixed
-
Medium
-
4.2.11
-
None
-
7.5
-
A scanner picked up that the pageId parameter in 500page.jsp is a potentially reflected xss bug. This can be exploited through a url like the following: https://example.com/pages/viewtrash.vm;editpage?pageId=%22%3E%3Cscript%3Ealert(1)%3C/script%3E
<%
String uri = (String)request.getAttribute("javax.servlet.error.request_uri");
if(uri != null && uri.contains("editpage"))
{
String editDraft = context + "/pages/editpage.action?useDraft=true&pageId=" + request.getParameter("pageId");
%>
<div class="panel warning">
<img id="draftNote" alt="" src="<%= context %>/images/icons/emoticons/warning.png">
You can <a href="<%= editDraft %>">resume editing</a> the most recently saved draft of your page.
</div>
<%
}
%>
[CONFSERVER-26270] reflected xss in the pageId request parameter in 500page.jsp
| Workflow | Original: JAC Bug Workflow v3 [ 2894445 ] | New: CONFSERVER Bug Workflow v4 [ 2987039 ] |
| Workflow | Original: JAC Bug Workflow v2 [ 2779033 ] | New: JAC Bug Workflow v3 [ 2894445 ] |
| Status | Original: Resolved [ 5 ] | New: Closed [ 6 ] |
| Workflow | Original: JAC Bug Workflow [ 2735075 ] | New: JAC Bug Workflow v2 [ 2779033 ] |
| Workflow | Original: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2400521 ] | New: JAC Bug Workflow [ 2735075 ] |
| Workflow | Original: Confluence Workflow - Public Facing - Restricted v5 [ 2300070 ] | New: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2400521 ] |
| Workflow | Original: Confluence Workflow - Public Facing - Restricted v5.1 - TEMP [ 2234279 ] | New: Confluence Workflow - Public Facing - Restricted v5 [ 2300070 ] |
| Workflow | Original: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2196550 ] | New: Confluence Workflow - Public Facing - Restricted v5.1 - TEMP [ 2234279 ] |
| Workflow | Original: Confluence Workflow - Public Facing - Restricted v5 [ 1924091 ] | New: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2196550 ] |
| Workflow | Original: Confluence Workflow - Public Facing - Restricted v3 [ 1732834 ] | New: Confluence Workflow - Public Facing - Restricted v5 [ 1924091 ] |
| Workflow | Original: CONF Bug Subtask WF (TEMP) [ 1689115 ] | New: Confluence Workflow - Public Facing - Restricted v3 [ 1732834 ] |