5894 matches found
Update application-links to fix APL-1327
Now that https://ecosystem.atlassian.net/browse/APL-1327 has been fixed, upgrade application-links to a version that contains a fix for it. In this case Fecru would update application-links from version 5.2.3 the version comes from the platform pom to version 5.2.4...
CVE-2016-6283
Cross-site scripting XSS vulnerability in Atlassian Confluence before 5.10.6 allows remote attackers to inject arbitrary web script or HTML via the newFileName parameter to pages/doeditattachment.action...
Cross site scripting
Cross-site scripting XSS vulnerability in Atlassian Confluence before 5.10.6 allows remote attackers to inject arbitrary web script or HTML via the newFileName parameter to pages/doeditattachment.action...
CVE-2016-6283
Cross-site scripting XSS vulnerability in Atlassian Confluence before 5.10.6 allows remote attackers to inject arbitrary web script or HTML via the newFileName parameter to pages/doeditattachment.action...
CVE-2016-6283
Cross-site scripting XSS vulnerability in Atlassian Confluence before 5.10.6 allows remote attackers to inject arbitrary web script or HTML via the newFileName parameter to pages/doeditattachment.action...
CVE-2016-6283
CVE-2016-6283 affects Atlassian Confluence
Atlassian Jira 7.1.7 Cross Site Scripting Vulnerability
Atlassian Jira version 7.1.7 suffers from a cross site scripting vulnerability. Reflected Cross-Site Scripting XSS in Atlassian Jira Software --------------------------------------------------------------- Authors: - Roberto Soares - roberto.soares tempest.com.br Tempest Security Intelligence -...
CVE-2016-6283: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Atlassian Confluence before 5.10.6 allows remote attackers to inject arbitrary web script or HTML via the newFileName parameter to pages/doeditattachment.action...
Atlassian Jira 7.1.7 Cross Site Scripting
===== Tempest Security Intelligence -ADV-2/2016 CVE-2016-6285 ========== Reflected Cross-Site Scripting XSS in Atlassian Jira Software --------------------------------------------------------------- Authors: - Roberto Soares - roberto.soares tempest.com.br Tempest Security Intelligence - Recife,...
Atlassian Bitbucket Server 4.x < 4.12.0 Unauthorized Access
Binary data 9887.prm...
Atlassian Bitbucket Server 4.x < 4.10.0 Unauthorized Access
Binary data 9886.prm...
Atlassian Bitbucket Server 4.x < 4.12.1 XSS
Binary data 9888.prm...
Atlassian Bitbucket Server < 4.0.0 CSRF/XSRF
Binary data 9884.prm...
Atlassian Bitbucket Server 4.5.x < 4.5.3 XSS
Binary data 9885.prm...
Atlassian Bitbucket Server 3.x < 3.10.0 Unauthorized Access
Binary data 9883.prm...
New Relic: newrelic.atlassian.net - jira information disclosure
The ticket raising system used by newrelic suffers from an informational vulnerability where in an attacker can view certain details about open bugs or project information of newrelic. Details include employee names and potentially email address and ticket names which an unauthorized personnel ca...
Atlassian Confluence HTML Injection Vulnerability
Atlassian Confluence is a professional enterprise knowledge management and collaboration software that can also be used to build enterprise WiKi. An HTML injection vulnerability exists in Atlassian Confluence. An attacker can exploit the vulnerability to execute arbitrary script code in the brows...
Atlassian Confluence XSS Vulnerability
Atlassian Confluence is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Atlassian Confluence 5.9.12 Cross Site Scripting
===== Tempest Security Intelligence - ADV-3/2016 CVE-2016-6283 ============== Persisted Cross-Site Scripting XSS in Confluence Jira Software ---------------------------------------------------------------- Authors: - Jodson Santos - [email protected] Tempest Security Intelligence -...
Atlassian Confluence Jira 5.9.12 - Persistent Cross-Site Scripting Vulnerability
Tempest Security Intelligence Advisory ADV-3/2016 - Atlassian Confluence version 5.9.12 is vulnerable to persistent cross site scripting because it fails to securely validate user controlled data, thus making it possible for an attacker to supply crafted input in order to harm users. The bug occu...