Various resources in Atlassian Confluence Server before version 6.4.2 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the issuesURL parameter.
References
Link Resource
http://www.securityfocus.com/bid/103061 Third Party Advisory VDB Entry
https://jira.atlassian.com/browse/CONFSERVER-54907 Issue Tracking Vendor Advisory
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: atlassian

Published: 2018-02-02T14:00:00

Updated: 2018-02-20T10:57:01

Reserved: 2018-02-01T00:00:00


Link: CVE-2017-18086

JSON object: View

cve-icon NVD Information

Status : Analyzed

Published: 2018-02-02T14:29:01.437

Modified: 2019-04-26T18:06:03.017


Link: CVE-2017-18086

JSON object: View

cve-icon Redhat Information

No data.

CWE