Description (CNA)
The attachment-uploading feature in Atlassian Confluence Server from version 6.14.0 through version 6.14.3, and version 6.15.0 before version 6.15.5 allows remote attackers to achieve stored cross-site- scripting (SXSS) via a malicious attachment with a modified `mimeType` parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Atlassian / Confluence Server | affected 6.14.0 before unspecified; affected unspecified through 6.14.3; affected 6.15.0 before unspecified; affected unspecified before 6.15.5 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.