CVE-2019-20102 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

Description

The attachment-uploading feature in Atlassian Confluence Server from version 6.14.0 through version 6.14.3, and version 6.15.0 before version 6.15.5 allows remote attackers to achieve stored cross-site- scripting (SXSS) via a malicious attachment with a modified `mimeType` parameter.

Reserved 2019-12-30 | Published 2020-04-22 | Updated 2024-09-16 | Assigner atlassian

Problem types

Cross Site Scripting (XSS)

Product status

6.14.0 before unspecified

affected

Any version

affected

6.15.0 before unspecified

affected

Any version before 6.15.5

affected

References

jira.atlassian.com/browse/CONFSERVER-59358

cve.org (CVE-2019-20102)

nvd.nist.gov (CVE-2019-20102)

Download JSON

https://cve.threatint.com/CVE/CVE-2019-20102

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.