Lucene search

CVE-2017-18083

🗓️ 02 Feb 2018 14:01:29Reported by atlassianType

CVE-2017-18083 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the contents of an uploaded file

Reporter	Title	Published	Views	Family All 5
NVD	CVE-2017-18083	2 Feb 201814:29	–	nvd
Prion	Cross site scripting	2 Feb 201814:29	–	prion
Atlassian	XSS in the editinword resource through the contents of an uploaded file - CVE-2017-18083	2 Feb 201800:10	–	atlassian
Atlassian	XSS in the editinword resource through the contents of an uploaded file - CVE-2017-18083	2 Feb 201800:10	–	atlassian
Cvelist	CVE-2017-18083	2 Feb 201814:00	–	cvelist

Nvd

Node

atlassian confluenceRange<6.4.0

[
  {
    "product": "Confluence",
    "vendor": "Atlassian",
    "versions": [
      {
        "status": "affected",
        "version": "prior to 6.4.0"
      }
    ]
  }
]

Source	Link
jira	www.jira.atlassian.com/browse/CONFSERVER-54903

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 Feb 2018 14:29Current

5.2Medium risk

Vulners AI Score5.2

CVSS23.5

CVSS35.4

EPSS0.00065

CWE-79