Security Advisory

CVE-2016-6283

6.1
MEDIUM

Vulnerability Description

Cross-site scripting (XSS) vulnerability in Atlassian Confluence before 5.10.6 allows remote attackers to inject arbitrary web script or HTML via the newFileName parameter to pages/doeditattachment.action.
Published Date January 18, 2017
Official Source NIST NVD Advisory