Design/Logic Flaw

An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could bypass the access controls for using a saved database connection profile to submit arbitrary SQL against a saved database connection...

CVE-2020-35121

An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could insert arbitrary JavaScript into saved macro parameters that would execute when a user viewed a page with that instance of the macro...

CVE-2020-35121

The CVE-2020-35121 entry affects the Keysight Database Connector plugin for Confluence (pre-1.5.0). An attacker could inject arbitrary JavaScript into saved macro parameters, which would execute when a page with that macro is viewed, enabling client-side code execution (a cross-site scripting vec...

CVE-2020-35122

An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could bypass the access controls for using a saved database connection profile to submit arbitrary SQL against a saved database connection...

CVE-2020-35122

The CVE-2020-35122 vulnerability affects the Keysight Database Connector plugin for Atlassian Confluence prior to version 1.5.0. A malicious user could bypass access controls for using a saved database connection profile to submit arbitrary SQL against a saved database connection. Root cause: ins...

Keysight Database Connector plugin code injection vulnerability

Bitbucket Keysight is a database connector plugin available for Atlassian products from the Bitbucket organization. A security vulnerability exists in the Keysight Database Connector plugin before 1.5.0, which originates from a malicious user being able to insert arbitrary JavaScript into saved...