Description

Cross-site scripting (XSS) vulnerability in Atlassian Confluence before 5.8.17 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to rest/prototype/1/session/check.

Remediation

References

CVE-2015-8398

Related Vulnerabilities

WordPress Plugin Titan Framework Cross-Site Scripting (1.7.5)

WordPress Plugin Relevant-Related Posts by BestWebSoft Cross-Site Scripting (1.0.7)

PHP Out-of-bounds Read Vulnerability (CVE-2020-7059)

WordPress Plugin WP Mapa Politico Espana Cross-Site Scripting (3.6.2)

WordPress Plugin Smart Google Code Inserter Multiple Vulnerabilities (3.4)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2015-8398