CVE-2024-23735: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in in the S/MIME certificate upload functionality of the User Profile pages in savignano S/Notify before 4.0.0 for Confluence allows attackers to manipulate user data via specially crafted certificate...

CVE-2024-23735

Cross Site Scripting XSS vulnerability in in the S/MIME certificate upload functionality of the User Profile pages in savignano S/Notify before 4.0.0 for Confluence allows attackers to manipulate user data via specially crafted certificate...

CVE-2024-23735

A Cross Site Scripting (XSS) vulnerability exists in the S/MIME certificate upload functionality of the User Profile pages in savignano S/Notify for Confluence versions prior to 4.0.0 . Attackers can exploit this flaw by providing a specially crafted certificate to manipulate user data . To resol...