CVE-2017-16856

The RSS Feed macro in Atlassian Confluence before version 6.5.2 allows remote attackers to inject arbitrary HTML or JavaScript via cross site scripting (XSS)…

published December 5, 2017

CVSS
—
EPSS
1%
Percentile
56.2
In the wild
Unconfirmed
What it is

The RSS Feed macro in Atlassian Confluence before version 6.5.2 allows remote attackers to inject arbitrary HTML or JavaScript via cross site scripting (XSS) vulnerabilities in various rss properties which were used as links without restriction on their scheme.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00809 · 56.2th percentile
Published
2017-12-05T16:00Z
EPSS history
Timeline
  • 05 DEC 16:00Z
    The RSS Feed macro in Atlassian Confluence before version 6.5.2 allows remote attackers to inject arbitrary HTML or JavaScript via cross site scripting (XSS)…
    cvelistv5