Webwork direct method invocation can bypass validatingStack through Action aliases

🗓️ 20 Nov 2012 01:56:54Reported by f4e9401f9900Type

atlassian

atlassian🔗 jira.atlassian.com👁 29 Views

Webwork direct method invocation bypassing validating stack by action aliases can lead to security vulnerabilitie

Vulners

Node

atlassian confluence_data_centerMatch3.5

OR

atlassian confluence_data_centerMatch4.2

OR

atlassian confluence_data_centerMatch4.3

OR

atlassian confluence_data_centerMatch5.0-od-15

OR

atlassian confluence_data_centerMatch4.3.5

OR

atlassian confluence_data_centerMatch5.0-od-26

11 Oct 2018 08:36Current

0.3Low risk

Vulners AI Score0.3

webwork direct method invocation security vulnerabilities action aliases validating stack validatingstack xsrf confluencexsrftokeninterceptor confluenceworkflowinterceptor interceptor stacks validation protections security filters confluence server changemypasswordaction