Update atlassian-gadgets in Confluence to fix AG-1502/ACG-5

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-45392. panel For Confluence Server as https://ecosystem.atlassian.net/browse/AG-1502 has been fixed, upgrade atlassian-gadgets t...

User Management - Space View and Edit Control

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-45194. panel With our Confluence users linking to LDAP, it is difficult having to create and delete groups to control permission...

Atlassian Confluence Server 4.3.x < 4.3.1 XSS

Binary data 9634.prm...

Atlassian Confluence Server 4.2.x < 4.2.13 XSS

Binary data 9632.prm...

Atlassian Confluence Server 4.1.x < 4.1.9 XSS

Binary data 9631.prm...

Atlassian Confluence Server 5.1.x < 5.1.4 DoS

Binary data 9638.prm...

Atlassian Confluence Server 5.1.x < 5.1.1 XSS

Binary data 9637.prm...

Atlassian Confluence Server 5.8.x < 5.8.6 Multiple Vulnerabilities

Binary data 9645.prm...

Atlassian Confluence Server 5.8.x < 5.8.17 Multiple Vulnerabilities

Binary data 9647.prm...

Atlassian Confluence Server < 5.2 Multiple Vulnerabilities

Binary data 9639.prm...

Atlassian Confluence Server 5.4.x < 5.4.2 XSS

Binary data 9641.prm...

Atlassian Confluence Server < 5.7 Reflected Static Content Injection

Binary data 9642.prm...

Atlassian Confluence Server 5.7.x < 5.7.1 Remote Disclosure

Binary data 9643.prm...

Atlassian Confluence Server < 4.3 Multiple Vulnerabilities

Binary data 9633.prm...

Atlassian Confluence Server 4.3.x < 4.3.3 SQLi

Binary data 9635.prm...

Atlassian Confluence Server 5.9.x < 5.9.14 Secret Key Disclosure

Binary data 9649.prm...

Atlassian Confluence Server 5.10.x < 5.10.4 Secret Key Disclosure

Binary data 9650.prm...

Check CSRF security in watch/unwatch action

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-39719. panel Check CSRF security in watch/unwatch action...

Cross-Site Scripting in subscribetocalendar.action

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-48910. panel The contents of the 'subCalendarId' parameter is not validated in POST requests to 'subscribetocalendar.action' and...

change fontset 'icons' to html entities to improve security compliance

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-38988. panel It seems that the icons in Confluence are currently rendered using fontset. This can be an issue for organization...