Cross site scripting

Cross-site scripting XSS vulnerability in Atlassian Confluence before 5.10.6 allows remote attackers to inject arbitrary web script or HTML via the newFileName parameter to pages/doeditattachment.action...

CVE-2016-6283

Cross-site scripting XSS vulnerability in Atlassian Confluence before 5.10.6 allows remote attackers to inject arbitrary web script or HTML via the newFileName parameter to pages/doeditattachment.action...

CVE-2016-6283

CVE-2016-6283 affects Atlassian Confluence

CVE-2016-6283

Cross-site scripting XSS vulnerability in Atlassian Confluence before 5.10.6 allows remote attackers to inject arbitrary web script or HTML via the newFileName parameter to pages/doeditattachment.action...

Atlassian Jira 7.1.7 Cross Site Scripting Vulnerability

Atlassian Jira version 7.1.7 suffers from a cross site scripting vulnerability. Reflected Cross-Site Scripting XSS in Atlassian Jira Software --------------------------------------------------------------- Authors: - Roberto Soares - roberto.soares tempest.com.br Tempest Security Intelligence -...

Atlassian Jira 7.1.7 Cross Site Scripting

===== Tempest Security Intelligence -ADV-2/2016 CVE-2016-6285 ========== Reflected Cross-Site Scripting XSS in Atlassian Jira Software --------------------------------------------------------------- Authors: - Roberto Soares - roberto.soares tempest.com.br Tempest Security Intelligence - Recife,...

Atlassian Bitbucket Server 4.x < 4.10.0 Unauthorized Access

Binary data 9886.prm...

Atlassian Bitbucket Server 4.x < 4.12.1 XSS

Binary data 9888.prm...

Atlassian Bitbucket Server 4.5.x < 4.5.3 XSS

Binary data 9885.prm...

Atlassian Bitbucket Server < 4.0.0 CSRF/XSRF

Binary data 9884.prm...

Atlassian Bitbucket Server 4.x < 4.12.0 Unauthorized Access

Binary data 9887.prm...

Atlassian Bitbucket Server 3.x < 3.10.0 Unauthorized Access

Binary data 9883.prm...

New Relic: newrelic.atlassian.net - jira information disclosure

The ticket raising system used by newrelic suffers from an informational vulnerability where in an attacker can view certain details about open bugs or project information of newrelic. Details include employee names and potentially email address and ticket names which an unauthorized personnel ca...

Atlassian Confluence HTML Injection Vulnerability

Atlassian Confluence is a professional enterprise knowledge management and collaboration software that can also be used to build enterprise WiKi. An HTML injection vulnerability exists in Atlassian Confluence. An attacker can exploit the vulnerability to execute arbitrary script code in the brows...

Atlassian Confluence XSS Vulnerability

Atlassian Confluence is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Atlassian Confluence Jira 5.9.12 - Persistent Cross-Site Scripting Vulnerability

Tempest Security Intelligence Advisory ADV-3/2016 - Atlassian Confluence version 5.9.12 is vulnerable to persistent cross site scripting because it fails to securely validate user controlled data, thus making it possible for an attacker to supply crafted input in order to harm users. The bug occu...

Atlassian Confluence 5.9.12 Cross Site Scripting

===== Tempest Security Intelligence - ADV-3/2016 CVE-2016-6283 ============== Persisted Cross-Site Scripting XSS in Confluence Jira Software ---------------------------------------------------------------- Authors: - Jodson Santos - [email protected] Tempest Security Intelligence -...

Atlassian Confluence 5.10.6 - Persistent Cross-Site Scripting

Atlassian Confluence 5.10.6 - Persistent Cross-Site Scripting...

Atlassian Confluence < 5.10.6 - Persistent Cross-Site Scripting

===== Tempest Security Intelligence - ADV-3/2016 CVE-2016-6283 ============== Persisted Cross-Site Scripting XSS in Confluence Jira Software ---------------------------------------------------------------- Authors: - Jodson Santos - [email protected] Tempest Security Intelligence -...

CVE-2016-6496

The LDAP directory connector in Atlassian Crowd before 2.8.8 and 2.9.x before 2.9.5 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted serialized Java object, aka LDAP entry poisoning...