Lucene search
+L

3 matches found

Atlassian
Atlassian
added 2011/06/14 5:27 a.m.20 views

Admin JSPs don't have XSRF protection

As well as a number of XSS bugs which were recently fixed in CONF-22568, the JSPs contained in Confluence don't support the same XSRF protection which our actions use. We should convert this functionality over to actions and only use JSPs to deliver patches to customers, not for proper...

2.4AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
added 2011/06/14 5:27 a.m.20 views

Admin JSPs don't have XSRF protection

As well as a number of XSS bugs which were recently fixed in CONF-22568, the JSPs contained in Confluence don't support the same XSRF protection which our actions use. We should convert this functionality over to actions and only use JSPs to deliver patches to customers, not for proper...

2.4AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
added 2011/06/14 5:27 a.m.23 views

Admin JSPs don't have XSRF protection

As well as a number of XSS bugs which were recently fixed in CONF-22568, the JSPs contained in Confluence don't support the same XSRF protection which our actions use. We should convert this functionality over to actions and only use JSPs to deliver patches to customers, not for proper...

2.4AI score
SaveExploits0
Rows per page
Query Builder