Medium WID-SEC-2024-1319 1 CVE

Atlassian Confluence: Schwachstelle ermöglicht Cross-Site Scripting

Published Jun 6, 2024 · Updated Jun 6, 2024 · de-DE

Vendor: Atlassian Product: Confluence Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Atlassian Confluence ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Confluence ist eine kommerzielle Wiki-Software.

Vulnerabilities 1

Medium 6.1

CVE-2023-43643

mXSS in AntiSamy

AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. Prior to version 1.7.4, there is a potential for a mutation XSS (mXSS) vulnerability in AntiSamy caused by flawed parsing of the HTML being sanitized. To …

nahsra antisamy libowasp-antisamy-java org.owasp.antisamy:antisamy Debian Ubuntu Maven

Oct 9, 2023

Revision history

2024-06-06 #1
Initiale Fassung

References

Atlassian issue CONFSERVER-95944 vom 2024-06-06
https://jira.atlassian.com/browse/CONFSERVER-95944
National Vulnerability Database CVE-2023-43643
https://nvd.nist.gov/vuln/detail/CVE-2023-43643