Описание
An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could insert arbitrary JavaScript into saved macro parameters that would execute when a user viewed a page with that instance of the macro.
Уязвимые конфигурации
Конфигурация 1Версия до 1.5.0 (исключая)
cpe:2.3:a:keysight:database_connector:*:*:*:*:*:confluence:*:*
EPSS
Процентиль: 60%
0.00397
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
NVD-CWE-noinfo
Связанные уязвимости
github
больше 3 лет назад
An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could insert arbitrary JavaScript into saved macro parameters that would execute when a user viewed a page with that instance of the macro.
EPSS
Процентиль: 60%
0.00397
Низкий
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
NVD-CWE-noinfo