EUVD-2020-17605

Malware in sbrugna...

Cross site scripting

The Table Filter and Charts for Confluence Server app before 5.3.25 for Atlassian Confluence allow remote attackers to inject arbitrary HTML or JavaScript via cross site scripting XSS through the provided Markdown markup to the "Table from CSV" macro...

CVE-2020-24897: Improper Neutralization of Input During Web Page Generation

The Table Filter and Charts for Confluence Server app before 5.3.25 for Atlassian Confluence allow remote attackers to inject arbitrary HTML or JavaScript via cross site scripting XSS through the provided Markdown markup to the "Table from CSV" macro...

PT-2020-15853

Name of the Vulnerable Software and Affected Versions Table Filter and Charts for Confluence Server versions prior to 5.3.26 Description The issue allows for Server-Side Request Forgery SSRF via the "Table from CSV" macro, specifically through a URL parameter. Recommendations For versions prior t...

CVE-2020-24898: Server-Side Request Forgery (SSRF)

The Table Filter and Charts for Confluence Server app before 5.3.26 for Atlassian Confluence allows SSRF via the "Table from CSV" macro URL parameter...