Lucene search
AtlassianCVELIST:CVE-2017-18084HistoryFeb 02, 2018 - 2:00 p.m.
CVE-2017-18084
2018-02-0214:00:00
atlassian
www.cve.org
4
EPSS
0.001
Percentile
28.6%
The usermacros resource in Atlassian Confluence Server before version 6.3.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the description of a macro.
CNA Affected
[
{
"product": "Confluence",
"vendor": "Atlassian",
"versions": [
{
"status": "affected",
"version": "prior to 6.3.4"
}
]
}
]Related
atlassian
atlassian
XSS in the usermacros resource through the description of a macro - CVE-2017-18084
2018-02-02 00:11:26
XSS in User Macros Description Field
2017-08-17 06:08:01
prion
prion
Cross site scripting
2018-02-02 14:29:00
cve
cve
CVE-2017-18084
2018-02-02 14:29:01
nessus
nessus
Atlassian Confluence < 6.3.4 usermacros Reflected XSS (CVE-2017-18084)
2018-02-22 00:00:00
nvd
nvd
CVE-2017-18084
2018-02-02 14:29:01