3610 matches found
Atlassian Confluence 安全漏洞
Atlassian Confluence is a suite of specialized enterprise knowledge management and collaboration software from Atlassian Australia, which can also be used to build enterprise WiKi. A security vulnerability exists in Atlassian Confluence versions prior to 1.3.5 that stems from improper handling of...
Atlassian Confluence 路径遍历漏洞
Atlassian Confluence is a suite of specialized enterprise knowledge management and collaboration software from Atlassian Australia that can also be used to build an enterprise WiKi. A path traversal vulnerability exists in Atlassian Confluence versions prior to 1.3.5. An attacker can exploit this...
Upgrade Apache Commons-text for CVE-2022-42889
h3. DISCLAIMER panel:bgColor=e3fcef ! Confluence IS NOT VULNERABLE to CVE-2022-42889|https://vulners.com/cve/CVE-2022-42889. This bug was created to track the change required to upgrade the Apache Commons Text library and can be used by customers to follow its progress and get notified on the nex...
CVE-2022-44724
The Handy Tip macro in Stiltsoft Handy Macros for Confluence Server/Data Center 3.x before 3.5.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability...
CVE-2022-44724
The Handy Tip macro in Stiltsoft Handy Macros for Confluence Server/Data Center 3.x before 3.5.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability...
Cross site scripting
The Handy Tip macro in Stiltsoft Handy Macros for Confluence Server/Data Center 3.x before 3.5.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability...
PT-2022-27285 · Stiltsoft · Stiltsoft Handy Macros For Confluence Server/Data Center
Name of the Vulnerable Software and Affected Versions: Stiltsoft Handy Macros for Confluence Server/Data Center versions 3.x through 3.5.4 Description: The issue allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in the Handy Tip macro. Thi...
CVE-2022-44724
The Handy Tip macro in Stiltsoft Handy Macros for Confluence Server/Data Center 3.x before 3.5.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability...
CVE-2022-44724: Improper Neutralization of Input During Web Page Generation
The Handy Tip macro in Stiltsoft Handy Macros for Confluence Server/Data Center 3.x before 3.5.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability...
Stiltsoft Handy Macros 跨站脚本漏洞
Stiltsoft Handy Macros is a powerful set of macros from Stiltsoft Inc. It is used to create interactive Confluence content. A security vulnerability exists in Stiltsoft Handy Macros version 3.x through versions prior to 3.5.5. An attacker could exploit this vulnerability to inject arbitrary HTML ...
CVE-2022-44724
CVE-2022-44724 describes a Cross-Site Scripting (XSS) vulnerability in the Handy Tip macro of Stiltsoft Handy Macros for Confluence Server/Data Center, affecting versions 3.x up to 3.5.4. The underlying issue is an XSS in the Handy Tip macro that allows remote attackers to inject arbitrary HTML o...
PT-2022-5345 · Atlassian +6 · Confluence +8
Name of the Vulnerable Software and Affected Versions: Apache XML Graphics versions prior to 1.16 Confluence Data Center and Server versions 7.13.0 and 7.19.0 Description: A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This...
PT-2022-5346 · Atlassian +6 · Confluence +8
Name of the Vulnerable Software and Affected Versions: Apache XML Graphics versions prior to 1.16 Confluence Data Center and Server versions 7.13.0 through 7.19.0, specifically versions prior to 7.19.16 Description: A vulnerability in the Apache Batik library for working with SVG images is relate...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 - OGNL injection vulnerability. Script proof...
com.btc.ep:btc-embeddedplatform (>=1.9.2-beta, <=2.5.9), org.jenkins-ci.plugins.workflow:workflow-aggregator (1.13) +8 more potentially affected by CVE-2022-43402 via org.jenkins-ci.plugins.workflow:workflow-cps (1.13)
org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.btc.ep:btc-embeddedplatform =1.9.2-beta, =2.0, =1.4, =1.12.1, =2.2,...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 Installation Download the Python scri...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
Installation git clone https://github.com/CJ-0107/cve-20...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 ATLASIAN-Confluence RCE Installa...