Description

Cross-site scripting (XSS) vulnerability in Atlassian Confluence before 5.8.17 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to rest/prototype/1/session/check.

Remediation

References

CVE-2015-8398

Related Vulnerabilities

Drupal Core 8.8.x Security Bypass (8.8.0 - 8.8.9)

WordPress Plugin Chameleon CSS SQL Injection (1.2)

Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-35615)

WordPress Plugin Bilingual Linker Cross-Site Scripting (2.1.1)

WordPress Plugin Esponce QR Code Generator Cross-Site Scripting (1.4)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2015-8398