Security Advisory

CVE-2017-18083

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-02-02 14:00:00

Last updated 2024-09-16 18:09:18

Assigner atlassian

CVSS score not scored

State PUBLISHED

Description

The editinword resource in Atlassian Confluence Server before version 6.4.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the contents of an uploaded file.

← Browse all CVEs View on cve.org ↗