4991 matches found
Cross site scripting
The TechTime User Management components for Atlassian products allow stored XSS on the Bulk User Actions page. This affects User Management for Jira 2.0.0 through 2.17.1, User Management for Confluence 2.0.0 through 2.15.24, and User Management for Bitbucket 2.2.2 through 2.15.24...
CVE-2023-36662
The CVE-2023-36662 entry concerns the TechTime User Management components for Atlassian products, which allow stored XSS on the Bulk User Actions page. Affected are: Jira User Management 2.0.0–2.17.1; Confluence User Management 2.0.0–2.15.24; Bitbucket User Management 2.2.2–2.15.24. Root cause: s...
CVE-2023-36662
The TechTime User Management components for Atlassian products allow stored XSS on the Bulk User Actions page. This affects User Management for Jira 2.0.0 through 2.17.1, User Management for Confluence 2.0.0 through 2.15.24, and User Management for Bitbucket 2.2.2 through 2.15.24...
Atlassian TechTime User Management 跨站脚本漏洞
Atlassian TechTime User Management is a user management system from Atlassian Australia. A security vulnerability exists in Atlassian TechTime User Management that stems from a stored cross-site scripting vulnerability in the Bulk User Actions page...
CVE-2023-36662
The TechTime User Management components for Atlassian products allow stored XSS on the Bulk User Actions page. This affects User Management for Jira 2.0.0 through 2.17.1, User Management for Confluence 2.0.0 through 2.15.24, and User Management for Bitbucket 2.2.2 through 2.15.24...
Atlassian Jira Teamlead Reminder plugin 跨站脚本漏洞
Teamlead Reminder is a plugin from Teamlead, Inc. A security vulnerability exists in Atlassian Jira Teamlead Reminder plugin version 2.6.5, which originates from a stored cross-site scripting attack via the message parameter...
Atlassian Confluence < 7.19.9 (CONFSERVER-83218)
The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-83218 advisory. A remote attacker, authenticated with read permissions, can upload attachments despite not having permissions to due to a broken access control...
CVE-2023-22504
Affected versions of Atlassian Confluence Server allow remote attackers who have read permissions to a page, but not write permissions, to upload attachments via a Broken Access Control vulnerability in the attachments feature...
CVE-2023-22504
Affected versions of Atlassian Confluence Server allow remote attackers who have read permissions to a page, but not write permissions, to upload attachments via a Broken Access Control vulnerability in the attachments feature...
CVE-2023-22504
Affected versions of Atlassian Confluence Server allow remote attackers who have read permissions to a page, but not write permissions, to upload attachments via a Broken Access Control vulnerability in the attachments feature...
CVE-2023-22504
CVE-2023-22504 affects Atlassian Confluence Server. Affected versions allow remote attackers with read permissions (not write) to upload attachments due to a Broken Access Control in the attachments feature. The issue is evidenced across multiple sources referencing Confluence Server prior to ver...
Atlassian Confluence Server 代码问题漏洞
Atlassian Confluence Server is the server version of Atlassian Australia's suite of collaboration software with enterprise knowledge management capabilities and support for building enterprise WiKi. A code issue vulnerability exists in Atlassian Confluence Server versions prior to 7.19.9, which...
PT-2023-18552 · Atlassian · Confluence
Name of the Vulnerable Software and Affected Versions: Atlassian Confluence Server affected versions not specified Description: The issue allows remote attackers with read permissions to a page, but not write permissions, to upload attachments. This is due to a Broken Access Control vulnerability...
Exploit for Injection in Atlassian Confluence_Data_Center
go-exploit: Go Exploit Framework !Gohttps://github.com/vu...
8220 Gang Exploiting Vulnerabilities in Cloud Environments for Cryptocurrency Mining
Threat Level Actor Report For a detailed threat advisory, download the pdf file here Summary The 8220 Gang is a cyber threat group that targets cloud and container environments, exploiting vulnerabilities in applications like Oracle WebLogic, Apache Log4j, and Atlassian Confluence. To receive...
User enumeration security issue when external authentication server is used
h3. Issue Summary This is reproducible on all Atlassian on-prem products that use LDAP or any other external server for authentication. It is possible to find out which usernames exists in the system and which do not exist by studying the response times it takes for a server to process a login...
Atlassian Confluence MoroSystems EasyMind - Mind Maps plugin 跨站脚本漏洞
Atlassian Confluence is a suite of specialized enterprise knowledge management and collaboration software from Atlassian Australia that can also be used to build enterprise WiKi. A security vulnerability exists in Atlassian Confluence MoroSystems EasyMind - Mind Maps plugin versions prior to...
The vulnerability of the pre-viewing function for macros in Atlassian Confluence Server and the date of the Confluence Data Center, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the preview function for macros on Atlassian Confluence Server and the Confluence Data Center is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected informati...
Atlassian Jira Service Management 4.14.0 < 4.20.10 / 4.21.0 < 4.22.4 Multiple Vulnerabilities
According to its self-reported version number, the Atlassian Jira Service Management application running on the remote host is version 4.14.0 prior to version 4.20.10 or 4.21.0 prior to 4.22.4. It is, therefore, affected by multiple vulnerabilities: - A flaw which permits authenticated remote...
Atlassian Jira Service Management 4.21.0 < 4.22.4 Multiple Vulnerabilities
According to its self-reported version number, the Atlassian Jira Service Management application running on the remote host is version 4.14.0 prior to version 4.20.10 or 4.21.0 prior to 4.22.4. It is, therefore, affected by multiple vulnerabilities: - A flaw which permits authenticated remote...