CVE-2017-18083 The editinword resource in Atlassian Confluence Server before version 6.4.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the co...
MediumCVSS 5.4
EPSS 0.58%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The editinword resource in Atlassian Confluence Server before version 6.4.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the contents of an uploaded file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| atlassian confluence | < 6.4.0 | 6.4.0 |
| atlassian confluence | = prior to 6.4.0 | No fix listed |
References
- jira.atlassian.com issue-tracking vendor-advisory