exploitDog

CVE-2017-18084

Опубликовано: 02 фев. 2018

Источник: nvd

CVSS3: 4.8

CVSS2: 3.5

EPSS Низкий

Описание

The usermacros resource in Atlassian Confluence Server before version 6.3.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the description of a macro.

Ссылки

http://www.securityfocus.com/bid/103064
Third Party Advisory
VDB Entry
https://jira.atlassian.com/browse/CONFSERVER-54904
Issue Tracking
Vendor Advisory
http://www.securityfocus.com/bid/103064
Third Party Advisory
VDB Entry
https://jira.atlassian.com/browse/CONFSERVER-54904
Issue Tracking
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:atlassian:confluence:*:*:*:*:*:*:*:*

Версия до 6.3.4 (исключая)

EPSS

Процентиль: 33%

0.0013

Низкий

4.8 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-4hx9-3q25-6fgc

CVSS3: 4.8

github

больше 3 лет назад

The usermacros resource in Atlassian Confluence Server before version 6.3.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the description of a macro.

EPSS

Процентиль: 33%

0.0013

Низкий

4.8 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79