CVE-2018-13389

Publication date

2018-07-10 13:00:00

Family

atlassian

State

PUBLISHED

Description

The attachment resource in Atlassian Confluence before version 6.6.1 allows remote attackers to spoof web content in the Mozilla Firefox Browser through attachments that have a content-type of application/rdf+xml.