vulnerability

Atlassian Confluence: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (CVE-2020-29444)

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
4	(AV:N/AC:M/Au:S/C:N/I:P/A:N)	May 7, 2021	Jun 2, 2021	Sep 18, 2024

Severity

CVSS

(AV:N/AC:M/Au:S/C:N/I:P/A:N)

Published

May 7, 2021

Added

Jun 2, 2021

Modified

Sep 18, 2024

Description

Affected versions of Team Calendar in Confluence Server before 7.11.0 allow attackers to inject arbitrary HTML or Javascript via a Cross Site Scripting Vulnerability in admin global setting parameters.

Solution

atlassian-confluence-upgrade-7_11_0

References

CVE-2020-29444
https://attackerkb.com/topics/CVE-2020-29444

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today