Description
The attachment resource in Atlassian Confluence before version 6.6.1 allows remote attackers to spoof web content in the Mozilla Firefox Browser through attachments that have a content-type of application/rdf+xml.
Remediation
References
Related Vulnerabilities
MySQL CVE-2017-3243 Vulnerability (CVE-2017-3243)
EspoCRM Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-88896)
WordPress Plugin Delete Comments By Status Multiple Cross-Site Scripting Vulnerabilities (1.5.2)
WordPress Plugin DM Albums 'album.php' Remote File Inclusion (1.9.2)
b2evolution URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-22840)