Lucene search
+L
AtlassianMost viewed

4567 matches found

Atlassian
Atlassian
•added 2012/10/08 1:32 a.m.•22 views

persistent xss in a user's username within mentions within comments

A user's username is injected into the "rel" attribute of the user mention link without being encoded properly. This means that if the username contains a " character then new attributes can be injected into the user mention link element. Hence, providing a persistent xss vector. To reproduce thi...

2AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2012/10/08 1:32 a.m.•22 views

persistent xss in a user's username within mentions within comments

A user's username is injected into the "rel" attribute of the user mention link without being encoded properly. This means that if the username contains a " character then new attributes can be injected into the user mention link element. Hence, providing a persistent xss vector. To reproduce thi...

2AI score
SaveExploits0
Atlassian
Atlassian
•added 2012/10/04 5:33 a.m.•22 views

Potential persistent xss in fixCaseInNotifications.jsp

There is a difficult to exploit XSS in fixCaseInNotifications.jsp. We could not get it to trigger, but there are some scenarios where unescaped data can be displayed through fix method correctName, userNameToFix. The relevant code is as follows: code NotificationCaseFixer caseFixer = new...

0.6AI score
SaveExploits0
Atlassian
Atlassian
•added 2012/09/12 6:20 p.m.•22 views

User email showing in suggestions section with visibility set to hidden

panel:bgColor=e7f4fa NOTE: This bug report is for JIRA Server. Using JIRA Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/JRACLOUD-29690. panel Assignee user-picker shows user email in Suggestions section, with User Email Visibility set to hidden. Steps to reproduce: Emai...

0.6AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2012/08/27 4:06 p.m.•22 views

Session ID and remember me cookie should expire when LDAP user password is changed

Steps to reproduce Login as a normal Confluence user In another browser or in incognito mode, login as system administrator Go to Confluence Admin Manage Users and click on the user Click Set Password and set a different password for this user Refresh the page and the user can still access the pa...

1.2AI score
SaveExploits0
Atlassian
Atlassian
•added 2012/08/08 3:47 a.m.•22 views

persistent xss vulnerability through uploaded files in IE8/9

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-46953. panel It is possible to upload a number of file types checked by extension to an answers instance and then download them...

1.4AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2012/08/03 3:24 a.m.•22 views

XSS (reflected) in fieldsKeys parameter of GHCreateNewIssue.jspa

Targets: https://test01.jira-dev.com/secure/GHCreateNewIssue.jspa?key=&issueType=7&fieldsKeys=priority,customfield10006,summary,fixVersions,components,customfield10005,assignee,customfield10004,reporter,customfield100039fd29alert'XSS'15d31825f8e9d6606&fieldsValues=1@%@...

2.8AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2012/08/01 7:46 a.m.•22 views

XSS (reflected) in rankVMID parameter of GetRankPage.jspa

As per https://sdog.jira.com/browse/JSTDEV-2110 Targets:...

0.7AI score
SaveExploits0
Atlassian
Atlassian
•added 2012/07/27 5:34 a.m.•22 views

ValidationHash generation should use random.SystemRandom instead of random class

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-47146. panel ValidationHash generation should use random.SystemRandom instead of the random.Random class when generating a rando...

0.1AI score
SaveExploits0
Atlassian
Atlassian
•added 2012/06/22 1:38 a.m.•22 views

XSS vulnerability in the "move" page action with html/js in the page name

There is an persistent xss vector in the 'move' page action on a page, where the javascript/html payload is included in the name of the page. Steps to reproduce: 1.create a page named: "''/'kasdfjas'dfasdf 2. on the page click on the "move" option under the tools drop-down menu 3. see an alert bo...

2.7AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2012/05/24 12:15 p.m.•22 views

User can upload attachments to restricted pages that adopt restrictions from parent page

Users that should have no access to restricted pages that adopt restrictions from the parent page are able to upload attachments if they know the page ID. How to reproduce: 1. Create 2 users, user1 and user2 2. Create a page with user1 and set the page view and edit restrictions to "Me" 3. Create...

2AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2012/04/19 4:31 a.m.•22 views

admin/fixCaseInNotifications.jsp lacks an XSRF token to start 'notifications fix'

admin/fixCaseInNotifications.jsp does not require a csrf to start 'notifications fix'. When fixing this issue, please ensure that the JSP is converted to an action or deleted - we don't want to have to maintain our XSRF infrastructure in JSPs...

1.7AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2012/04/19 4:19 a.m.•22 views

admin/dev/shortcuts.jsp lacks an XSRF token to alter installed/.configured shortcuts

admin/dev/shortcuts.jsp does not require a csrf token to alter installed/.configured shortcuts...

1.6AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2012/04/13 10:05 p.m.•22 views

Confluence does not respect HTTPS in Server Base URL when 301 redirecting

We have Confluence setup behind an Apache reverse proxy and our Server Base URL is set to "https://confluence...". However, when Confluence sends out a 301, it always sends the Location: http://confluence..., which then gets redirected by Apache to https://confluence... Confluence should respect...

0.4AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2012/03/30 4:54 a.m.•22 views

XML Vulnerability in Confluence

We have identified and fixed a vulnerability in Confluence that results from the way third-party XML parsers are used in Confluence. This vulnerability allows an attacker to: Execute denial of service attacks against the Confluence server, or Read all local files readable to the system user under...

2AI score
SaveExploits0
Atlassian
Atlassian
•added 2012/02/23 9:04 a.m.•22 views

XSS Vulnerabilities in JIRA Attachments?

At the current moment, JIRA do not have any restrictions for attachment files, which allows users to upload malicious file into JIRA issues. This can be a problem when we open an attachments using Mozilla Firefox, since the browser allows us to open attachments using web browser. The steps to...

0.5AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2012/02/23 9:04 a.m.•22 views

XSS Vulnerabilities in JIRA Attachments?

At the current moment, JIRA do not have any restrictions for attachment files, which allows users to upload malicious file into JIRA issues. This can be a problem when we open an attachments using Mozilla Firefox, since the browser allows us to open attachments using web browser. The steps to...

0.5AI score
SaveExploits0
Atlassian
Atlassian
•added 2011/11/28 10:05 a.m.•22 views

Do not show registered users in quick search to anonymous users

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-23985. panel Registered users appears in quick search, even when it's a search made by anonymous...

3.1AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2011/10/19 11:45 a.m.•22 views

Actions doeditpage,domovepage,docreatepage do not require XSRF token

When checking the application for security leaks, I found that the actions doeditpage, domovepage and docreatepage explicitly set the requireSecurityToken=false in the xwork.xml. This could be a possible leak in an attack scenario. Is there a reason, why these actions should not require the...

1.9AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2011/09/29 7:31 p.m.•22 views

Visual clues to native vs. ldap users and groups

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-23355. panel In a mixed environment with Confluence and LDAP users and groups, it would be helpful when administering users and...

1.7AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2011/08/22 6:19 a.m.•22 views

make space admin able to see restricted pages in his own space

This is a request to make space admins able to see the content of restricted pages in their own spaces. Currently only confluence-administrators can do that...

2AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2011/07/09 1:35 a.m.•22 views

Support web sudo and other password confirmation features with custom authenticators

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-22875. panel By default, web sudo and other password confirmation features in Confluence 3.5 and later are disabled if a custom...

SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2011/06/07 12:52 a.m.•22 views

XSS Vulnerability in Issue Links and Labels

We have identified and fixed a number of cross-site scripting XSS vulnerabilities in JIRA issue links and labels. Affected versions are 4.2.x to 4.3.x XSS vulnerabilities potentially allow an attacker to embed their own JavaScript into a JIRA page. You can read more about XSS attacks at various...

SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2011/05/11 7:03 a.m.•22 views

XSS vulnerability in doeditmysettings.action

This vulnerability affects all versions from 3.5 and above. We have identified and fixed a cross-site scripting XSS vulnerability in the Confluence settings editing action. XSS vulnerabilities potentially allow an attacker to embed their own JavaScript into a Confluence page. You can read more...

0.1AI score
SaveExploits0
Atlassian
Atlassian
•added 2011/04/21 2:58 p.m.•22 views

As a developer or release manager I want to be able to create and manage versions in JIRA without having to be given project admin permissions

Currently JIRA only allows a user to create, release and generally manage versions in a project if the user is a project admin. However there are numerous use cases where developers, release managers, project managers, etc. need to be able to perform this function but don't need full admin rights...

1.3AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2011/04/21 1:16 a.m.•22 views

XSS vulnerability in Crucible's Snippets

We have identified and fixed a cross-site scripting XSS vulnerability in the Crucible Snippets. Affected versions are Crucible 2.4.5 to 2.5.0 inclusive. XSS vulnerabilities potentially allow an attacker to embed their own JavaScript into a FishEye/Crucible page. You can read more about XSS attack...

SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2011/04/06 5:41 p.m.•22 views

Seraph in Confluence 3.5 environment no longer able to instantiate custom authenticator

Customer using custom authenticator no longer works in Confluence 3.5 despite updates to latest API, latest Atlassian SDK, and building against Confluence 3.5 and embedded Crowd. See attached error log from customer. In brief, error is: noformat Caused by:...

0.6AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2011/03/23 2:52 a.m.•22 views

Profile picture thumbnail generation can consume unlimited amount of memory

Discovered a Studio customer, you can upload a very large profile picture to expose the same problem as CONF-21480, just in a different area of the application. We should limit the size of images we're willing to load into memory to avoid this problem with user pictures...

1.6AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2011/02/09 1:53 p.m.•22 views

User Enumeration

Security auditing tests performed on a Jira Bug Issue and Project Tracking Software locally running instance shown that at least two vulnerabilities regarding User Enumeration were found within the software. Case 1: Logged In Whenever a logged user accesses the Url...

1.1AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2010/12/03 3:34 a.m.•22 views

XSS vulnerability in Create Space Button macro

We have identified and fixed a cross-site scripting XSS vulnerability in the Confluence create-space-button macro. XSS vulnerabilities potentially allow an attacker to embed their own JavaScript into a Confluence page. You can read more about XSS attacks at various places on the web, including...

0.3AI score
SaveExploits0
Atlassian
Atlassian
•added 2010/12/03 2:26 a.m.•22 views

XSS vulnerability in Global Reports macro

We have identified and fixed a cross-site scripting XSS vulnerability in the Confluence global-reports macro. XSS vulnerabilities potentially allow an attacker to embed their own JavaScript into a Confluence page. You can read more about XSS attacks at various places on the web, including these:...

5.5AI score
SaveExploits0
Atlassian
Atlassian
•added 2010/12/02 11:00 p.m.•22 views

XSS vulnerability in Bookmarks macro

We have identified and fixed a cross-site scripting XSS vulnerability in the Confluence bookmarks macro. XSS vulnerabilities potentially allow an attacker to embed their own JavaScript into a Confluence page. You can read more about XSS attacks at various places on the web, including these:...

SaveExploits0
Atlassian
Atlassian
•added 2010/10/26 2:15 p.m.•22 views

Allow to specify which user to be used in trusted connection with JIRA

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-21127. panel This is an improvement request to allow specifying which user to be used in trusted connection with JIRA. Proposed...

1.5AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2010/10/26 2:11 a.m.•22 views

Intermittent Session Lost During Add/Edit Page in Firefox

We customized Seraph to integrate with our SSO Server. Seraph will perform session validation through cookies. When using firefox, we found that in 1 out of 5 to 8 times when we edit a page or add a new page, we will lose our session and be directed back to the login page. This does not happen in...

0.5AI score
SaveExploits0
Atlassian
Atlassian
•added 2010/09/16 1:30 p.m.•22 views

Can't set visibility on comment created via Activity Stream Gadget

I can't restrict the visibility of an comment created via the activity stream gadget. In our environment it is important for us to have this feature available everywhere where users are able to create comments on issues...

4.5AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2010/08/25 2:04 a.m.•22 views

XSRF vulnerability in the Mail Page plugin

We have identified and fixed a cross-site request forgery XSRF vulnerability which may affect Confluence instances in a public environment. The XSRF vulnerability is exposed in the Confluence Mail Page plugin. Note that the Mail Page plugin is disabled by default. If you do not have this plugin...

6.8AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2010/08/18 6:38 a.m.•22 views

websudo annotation backwards compatibility (Confluence 3.3)

Following this guide|http://confluence.atlassian.com/pages/viewpage.action?pageId=219021702, I started to use the websudo annotations to secure an XWork action that would process a form in the space admin tab. The plugin is meant to work with Confluence 3.3 and I haven't released a public version...

1.7AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2010/06/21 3:40 a.m.•22 views

XSS vulnerability in PDF export

We have identified and fixed a cross-site scripting XSS vulnerability in the Confluence action that performs the export to PDF. An attacker might take advantage of the vulnerability to steal other users' session cookies or other credentials, by sending the credentials back to such an attacker's o...

0.1AI score
SaveExploits0
Atlassian
Atlassian
•added 2010/06/17 8:46 a.m.•22 views

Can not UPDATE the "Viewable By" field of an issue

After the creation of an issue it is by default viewable by "All Users". It is not possible to change the value after re-editing that issue. After changing it and clicking the "Update" button, the viewable by entry stays "All Users"...

3.9AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2010/05/31 6:58 a.m.•22 views

WebSudo should be disabled in devmode

When confluence is started in dev mode, websudo should be disabled...

1.2AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2010/05/26 3:03 a.m.•22 views

XSS in mailpage plugin

XSS vulnerability has been reported against the mailpage plugin. It allows an attacker to execute arbitrary javascript. A new version of the issue has been released that fixes this problem...

4.8AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2010/05/11 11:35 p.m.•22 views

500page.jsp Improvements

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-19601. panel Some further improvements to the 500page.jsp: The following should not appear if there is no stack trace: quote Cau...

1.1AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2010/04/22 5:52 a.m.•22 views

XSS vulnerability in some JSPs under admin section

Several JSPs found under the admin section of Confluence have been found to be vulnerable to XSS attacks. This issue corrects those problems. This issue is rated HIGH. Please refer to http://confluence.atlassian.com/x/ZILmD for information on other security related issues and more information on...

0.1AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2010/04/22 5:28 a.m.•22 views

Only strings are encoded

The XML encoder only encodes strings. This could make Confluence return non encoded content. This issue is rated HIGH. Please see http://confluence.atlassian.com/x/ZILmD for more security related issue and more information on how we rate issues...

0.3AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2010/04/22 5:28 a.m.•22 views

Only strings are encoded

The XML encoder only encodes strings. This could make Confluence return non encoded content. This issue is rated HIGH. Please see http://confluence.atlassian.com/x/ZILmD for more security related issue and more information on how we rate issues...

0.3AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2010/04/22 12:49 a.m.•22 views

XSS vulnerability in Colour Scheme settings

An XSS vulnerability has been discovered in the Colour Scheme settings. The severity of this issue is rated as HIGH. Please refer to the security advisory http://confluence.atlassian.com/display/DOC/Confluence+Security+Advisory+2010-04-x for details...

0.2AI score
SaveExploits0
Atlassian
Atlassian
•added 2010/04/22 12:37 a.m.•22 views

XSS vulnerability in search

An XSS vulnerability has been found in the searching component of Confluence...

1.5AI score
SaveExploits0
Atlassian
Atlassian
•added 2010/04/19 12:57 a.m.•22 views

Brute force protection on JIRA 4.1 leaks valid account names

The brute force login protection in JIRA only activates when a real user account is accessed. This can be used by an attacker to harvest a list of valid logins on the system. The brute force login protection should activate when either the login or the password is wrong...

2.3AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2010/04/19 12:57 a.m.•22 views

Brute force protection on JIRA 4.1 leaks valid account names

panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/JRACLOUD-21036. panel The brute force login protection in JIRA only activates when a real user account is accessed. This can be used by an attacker to...

1.9AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2010/04/16 5:04 a.m.•22 views

issuelinkssmall.jsp has an XSS hole via the URL used to access it

The issuelinkssmall.jsp has an XSS hole, where if the URL contains an XSS string, the ww:url tag will include that tag in the page because the value attribute was left empty...

1.3AI score
SaveExploits0Affected Software1
Total number of security vulnerabilities4567