The viewdefaultdecorator resource in Atlassian Confluence Server before version 6.6.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the key parameter.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: atlassian
Published: 2018-02-02T14:00:00Z
Updated: 2024-09-17T03:22:54.533Z
Reserved: 2018-02-01T00:00:00
Link: CVE-2017-18085
Vulnrichment
No data.
NVD
Status : Modified
Published: 2018-02-02T14:29:01.373
Modified: 2024-11-21T03:19:19.740
Link: CVE-2017-18085
Redhat
No data.