CVE-2016-4317
Atlassian Confluence Server before 5.9.11 has XSS on the viewmyprofile.action page.
- Score
- CVSS 3.0 5.4 Medium
- Status
- Modified - cret@cert.org
- Published
- 2017-04-10
- Last modified
- 2024-08-06
- Weaknesses
- CWE-79
Affected products
References
- http://www.securityfocus.com/bid/97513
- https://confluence.atlassian.com/doc/confluence-5-9-11-release-notes-827123763.html
- https://jira.atlassian.com/browse/CONF-42713
- https://jira.atlassian.com/browse/CONFSERVER-42713
