l0nax/CVE-2019-15053

l0nax/CVE-2019-15053

GitHubGitHub
GitHubgithub.com
Releases0
(FAB-2019-00156) Vulnerability discoverd by me CVE-2019-15053
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2019-15053↗
—6 MEDIUM

The "HTML Include and replace macro" plugin before 1.5.0 for Confluence Server allows a bypass of the includeScripts=false XSS protection mechanism via vectors involving an IFRAME element.