Security Advisory

CVE-2018-13389

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-07-10 13:00:00
Last updated 2024-09-17 01:15:40
Assigner atlassian
State PUBLISHED

Description

The attachment resource in Atlassian Confluence before version 6.6.1 allows remote attackers to spoof web content in the Mozilla Firefox Browser through attachments that have a content-type of application/rdf+xml.