CVE-2020-14175

Affected versions of Atlassian Confluence Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS)…

published July 24, 2020

CVSS
—
EPSS
1%
Percentile
66.7
In the wild
Unconfirmed
What it is

Affected versions of Atlassian Confluence Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in user macro parameters. The affected versions are before version 7.4.2, and from version 7.5.0 before 7.5.2.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01154 · 66.7th percentile
Published
2020-07-24T07:05Z
EPSS history
Timeline
  • 24 JUL 07:05Z
    Affected versions of Atlassian Confluence Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS)…
    cvelistv5