Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-frc2-fc33-2pfw

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.7

Описание

The attachment resource in Atlassian Confluence before version 6.6.1 allows remote attackers to spoof web content in the Mozilla Firefox Browser through attachments that have a content-type of application/rdf+xml.

The attachment resource in Atlassian Confluence before version 6.6.1 allows remote attackers to spoof web content in the Mozilla Firefox Browser through attachments that have a content-type of application/rdf+xml.

EPSS

Процентиль: 37%
0.0016
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 4.7
nvd
больше 7 лет назад

The attachment resource in Atlassian Confluence before version 6.6.1 allows remote attackers to spoof web content in the Mozilla Firefox Browser through attachments that have a content-type of application/rdf+xml.

EPSS

Процентиль: 37%
0.0016
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-20