Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-47042

XSS vulnerabilities in Atlassian Answers

XMLWordPrintable

      NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report.

      Some users seem to try XSS attack on Atlassian Answers.

      How to replicate is the following steps.
      Go to the top page https://answers.atlassian.com/.
      Chose "Browse", "Users" and "Sort By Username" then a alert dialogue box will appear.

            [CONFSERVER-47042] XSS vulnerabilities in Atlassian Answers

            Joe Clark added a comment -

            Hi,

            Thanks very much for taking the time to report this issue. We've already had this issue reported to us just last week and we are ready to deploy a fix that will solve the problem. I will keep this issue updated with the status of the fix.

            Please comment on this issue if you have any concerns or questions.

            Kind regards,
            Joe Clark
            Atlassian

            Joe Clark added a comment - Hi, Thanks very much for taking the time to report this issue. We've already had this issue reported to us just last week and we are ready to deploy a fix that will solve the problem. I will keep this issue updated with the status of the fix. Please comment on this issue if you have any concerns or questions. Kind regards, Joe Clark Atlassian

              jclark@atlassian.com Joe Clark
              777bd0e4fac3 Shun Hirayanagi
              Affected customers:
              0 This affects my team
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: