|
251161
|
6.1 |
MEDIUM
Network
|
atlassian
|
confluence
|
Various resources in Atlassian Confluence Server before version 6.4.2 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the issuesURL par…
|
CWE-79
Cross-site Scripting
|
CVE-2017-18086
|
2024-11-21 12:19 |
2018-02-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251162
|
6.1 |
MEDIUM
Network
|
atlassian
|
confluence
|
The viewdefaultdecorator resource in Atlassian Confluence Server before version 6.6.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability thr…
|
CWE-79
Cross-site Scripting
|
CVE-2017-18085
|
2024-11-21 12:19 |
2018-02-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251163
|
4.8 |
MEDIUM
Network
|
atlassian
|
confluence
|
The usermacros resource in Atlassian Confluence Server before version 6.3.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the d…
|
CWE-79
Cross-site Scripting
|
CVE-2017-18084
|
2024-11-21 12:19 |
2018-02-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251164
|
5.4 |
MEDIUM
Network
|
atlassian
|
confluence
|
The editinword resource in Atlassian Confluence Server before version 6.4.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the c…
|
CWE-79
Cross-site Scripting
|
CVE-2017-18083
|
2024-11-21 12:19 |
2018-02-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251165
|
5.4 |
MEDIUM
Network
|
atlassian
|
bamboo
|
The plan configure branches resource in Atlassian Bamboo before version 6.2.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the…
|
CWE-79
Cross-site Scripting
|
CVE-2017-18082
|
2024-11-21 12:19 |
2018-02-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251166
|
6.1 |
MEDIUM
Network
|
atlassian
|
bamboo
|
The signupUser resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the value of the…
|
CWE-79
Cross-site Scripting
|
CVE-2017-18081
|
2024-11-21 12:19 |
2018-02-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251167
|
8.8 |
HIGH
Network
|
atlassian
|
bamboo
|
The saveConfigureSecurity resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify security settings via a Cross-site request forgery (CSRF) vulnerability.
|
CWE-352
Origin Validation Error
|
CVE-2017-18080
|
2024-11-21 12:19 |
2018-02-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251168
|
8.8 |
HIGH
Network
|
atlassian
|
bamboo
|
The update user administration resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify user data including passwords via a Cross-site request forgery (CSRF) vulnerability.
|
CWE-352
Origin Validation Error
|
CVE-2017-18042
|
2024-11-21 12:19 |
2018-02-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251169
|
5.4 |
MEDIUM
Network
|
atlassian
|
bamboo
|
The viewDeploymentVersionJiraIssuesDialog resource in Atlassian Bamboo before version 6.2.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerabili…
|
CWE-79
Cross-site Scripting
|
CVE-2017-18041
|
2024-11-21 12:19 |
2018-02-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251170
|
5.4 |
MEDIUM
Network
|
atlassian
|
bamboo
|
The viewDeploymentVersionCommits resource in Atlassian Bamboo before version 6.2.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the…
|
CWE-79
Cross-site Scripting
|
CVE-2017-18040
|
2024-11-21 12:19 |
2018-02-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|