Lucene search
AtlassianCVELIST:CVE-2017-16856HistoryDec 05, 2017 - 4:00 p.m.
CVE-2017-16856
2017-12-0516:00:00
atlassian
www.cve.org
4
EPSS
0.001
Percentile
40.6%
The RSS Feed macro in Atlassian Confluence before version 6.5.2 allows remote attackers to inject arbitrary HTML or JavaScript via cross site scripting (XSS) vulnerabilities in various rss properties which were used as links without restriction on their scheme.
CNA Affected
[
{
"product": "Confluence",
"vendor": "Atlassian",
"versions": [
{
"status": "affected",
"version": "All versions prior to version 6.5.2"
}
]
}
]Related
prion
prion
Cross site scripting
2017-12-05 16:29:00
atlassian
atlassian
XSS through various RSS properties in the RSS macro - CVE-2017-16856
2017-12-05 04:13:54
XSS through various RSS properties in the RSS macro - CVE-2017-16856
2017-12-05 04:13:54
cve
cve
CVE-2017-16856
2017-12-05 16:29:00
nvd
nvd
CVE-2017-16856
2017-12-05 16:29:00
openvas
openvas
Atlassian Confluence XSS Vulnerability
2017-12-07 00:00:00