Description
Various resources in Atlassian Confluence Server before version 6.4.2 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the issuesURL parameter.
Unscored
CVE-2017-18086
EUVD-2017-9223GHSA-32jp-7xc2-p7fc
Various resources in Atlassian Confluence Server before version 6.4.2 allow remote attackers to inject arbitrary HTML or JavaScript via a c…
Published Feb 2, 2018 · Updated Aug 5, 2024 · Assigned by atlassian