vulnerability
Atlassian Confluence: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (CVE-2020-29444)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:S/C:N/I:P/A:N) | May 7, 2021 | Jun 2, 2021 | Sep 18, 2024 |
Severity
4
CVSS
(AV:N/AC:M/Au:S/C:N/I:P/A:N)
Published
May 7, 2021
Added
Jun 2, 2021
Modified
Sep 18, 2024
Description
Affected versions of Team Calendar in Confluence Server before 7.11.0 allow attackers to inject arbitrary HTML or Javascript via a Cross Site Scripting Vulnerability in admin global setting parameters.
Solution
atlassian-confluence-upgrade-7_11_0
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.