CVE-2020-14175 | BDVDB-2026-139421 Detail

AtlassianConfluence Server

Description#

Affected versions of Atlassian Confluence Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in user macro parameters. The affected versions are before version 7.4.2, and from version 7.5.0 before 7.5.2.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://jira.atlassian.com/browse/CONFSERVER-60102

Exploit#

No public exploit known

History#

Version 12020-07-24Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.