CVE-2019-10100: Improper Control of Generation of Code

In JetBrains YouTrack Confluence plugin versions before 1.8.1.3, it was possible to achieve Server Side Template Injection. The attacker could add an Issue macro to the page in Confluence, and use a combination of a valid id field and specially crafted code in the link-text-template field to...

PT-2019-11429

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack Confluence plugin versions prior to 1.8.1.3 Description: The issue allows for Server Side Template Injection. An attacker can add an Issue macro to a page in Confluence and use a combination of a valid id field and speciall...