Lucene search
Security-metrics-botATLASSIAN:CONFSERVER-54904HistoryFeb 02, 2018 - 12:11 a.m.
XSS in the usermacros resource through the description of a macro - CVE-2017-18084
2018-02-0200:11:26
security-metrics-bot
jira.atlassian.com
51
EPSS
0.001
Percentile
28.6%
The usermacros resource in Atlassian Confluence Server before version 6.3.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the description of a macro.
Acknowledgements
Atlassian would like to credit Veit Hailperin (@fenceposterror) for reporting this issue to us.
Related
prion
prion
Cross site scripting
2018-02-02 14:29:00
cve
cve
CVE-2017-18084
2018-02-02 14:29:01
atlassian
atlassian
XSS in User Macros Description Field
2017-08-17 06:08:01
cvelist
cvelist
CVE-2017-18084
2018-02-02 14:00:00
nessus
nessus
Atlassian Confluence < 6.3.4 usermacros Reflected XSS (CVE-2017-18084)
2018-02-22 00:00:00
nvd
nvd
CVE-2017-18084
2018-02-02 14:29:01